CVE-2026-124490

OpenEMR versions prior to 8.3.0 are vulnerable to a path traversal vulnerability within the RingCentral RCFaxClient disposeDocument() method of the oe-module-faxsms component. This flaw allows authenticated attackers to perform arbitrary file reads and writes via the file_path parameter. Specific...