CVE-2026-124467

OpenEMR versions before 8.4.0 are vulnerable to Remote Code Execution due to a local file inclusion in the ESign router (library/ESign/Router.php). The software fails to sanitize the module parameter, which is used in a require_once statement for /Controller.php. Additionally, the fax module (fax...