CVE-2026-126457

OpenEMR versions before 8.5.0 are vulnerable to a missing authorization flaw in the InstallerController module. This vulnerability allows any authenticated user, including low-privileged users like Front Office clerks, to modify module administration settings without the required admin/manage_mod...