CVE-2026-34051

OpenEMR versions prior to 8.0.0.3 have an improper access control on the Import/Export functionality, allowing unauthorized users to perform import/export actions via direct request manipulation despite UI restrictions. This can lead to unauthorized data access, bulk data extraction, and manipula...