EUVD-2026-125002

OpenEMR before 8.5.0 contains an insecure direct object reference vulnerability in the CAMOS rxprint.php printer that allows authenticated users to read other patients' prescriptions. Attackers can submit forged chrx parameters with global prescription IDs to disclose drug names, dosages,...

CVE-2026-126450

OpenEMR versions before 8.5.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. An authenticated user can inject malicious scripts by placing payloads into the patient External ID field. These scripts execute in the browser sessions of other users who access the patient's presc...

CVE-2026-124483

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes the check. Authenticated staff users can reuse the...

CVE-2026-124483

OpenEMR versions prior to 8.4.0 are affected by an improper authorization vulnerability within the prescription REST API . The root cause is that the API routes incorrectly check the patients.med ACL instead of patients.rx, and the lack of a specific permission bit allows read-only Medical/Histor...

CVE-2026-124483 OpenEMR before 8.4.0 Improper Authorization via Prescription REST API

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes the check. Authenticated staff users can reuse the...

CVE-2026-124483 OpenEMR before 8.4.0 Improper Authorization via Prescription REST API

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes the check. Authenticated staff users can reuse the...

EUVD-2026-119538

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes the check. Authenticated staff users can reuse the...

CVE-2026-124483 OpenEMR before 8.4.0 Improper Authorization via Prescription REST API

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes the check. Authenticated staff users can reuse the...

PT-2026-139996

OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access passes the check. Authenticated staff users can reuse the...

CVE-2026-31071

API endpoints in LalanaChami Pharmacy Management System commit 5c3d028 lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records including bcrypt password hashes via /api/user/getUserData, modify drug inventory, and access private medical...

CVE-2026-31071

API endpoints in LalanaChami Pharmacy Management System commit 5c3d028 lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records including bcrypt password hashes via /api/user/getUserData, modify drug inventory, and access private medical...

CVE-2026-31071

API endpoints in LalanaChami Pharmacy Management System commit 5c3d028 lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records including bcrypt password hashes via /api/user/getUserData, modify drug inventory, and access private medical...

CVE-2026-31071

API endpoints in LalanaChami Pharmacy Management System commit 5c3d028 lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records including bcrypt password hashes via /api/user/getUserData, modify drug inventory, and access private medical...

CVE-2026-31071

API endpoints in LalanaChami Pharmacy Management System commit 5c3d028 lack authentication middleware. Unauthenticated remote attackers can exploit this to dump all user records including bcrypt password hashes via /api/user/getUserData, modify drug inventory, and access private medical...

PT-2026-41944

Name of the Vulnerable Software and Affected Versions LalanaChami Pharmacy Management System version 5c3d028 Description Certain API endpoints lack authentication middleware, allowing unauthenticated remote attackers to access sensitive data and perform unauthorized actions. Specifically, the...

CVE-2026-31071

The LalanaChami Pharmacy Management System (commit 5c3d028 ) is vulnerable to unauthorized access due to a lack of authentication middleware on specific API endpoints. Unauthenticated remote attackers can exploit these endpoints to dump all user records—including bcrypt password hashes —via /api/...

CVE-2026-34056

OpenEMR is a free and open source electronic health records and medical practice management application. A Broken Access Control vulnerability in OpenEMR up to and including version 8.0.0.3 allows low-privilege users to view and download Ensora eRx error logs without proper authorization checks...

CVE-2024-2276

A vulnerability has been found in Bdtask G-Prescription Gynaecology & OBS Consultation Software 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /Venuecontroller/editvenue/ of the component Edit Venue Page. The manipulation of the argument...

Digital Transformation Usain Bolt-Style: Health Care's Sprint to Modernization

In the present age, patients now use smartphone apps to schedule doctor's visits, contact insurance companies, and get prescriptions instead of picking up the phone...

drchrono: User with no permissions can create, edit, delete favorite prescriptions /erx/

Hi All, I believe I've found a vulnerability with regards to creating, editing and deleting favorite prescriptions. Description I have a doctor's organization with a staff member who has no permissions. If I visit https://1337test.drchrono.com/erx/ I get permission denied. However, I can create,...