CVE-2026-126472

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...

CVE-2026-126439

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...

CVE-2026-126439

OpenEMR versions before 8.5.0 are vulnerable to an authorization bypass in the ccdaservice/ccda_gateway.php component. The root cause is a failure to enforce the patients/pat_rep permission, allowing any authenticated core session to bypass restrictions. Exploiting this, an attacker without prope...

CVE-2026-126439 OpenEMR before 8.5.0 Authorization Bypass via C-CDA Gateway ccda_gateway.php

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...

EUVD-2026-125004

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...

EUVD-2026-124952

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...

CVE-2026-126472 OpenEMR before 8.5.0 Missing Authorization in ccdaservice/ccda_gateway.php C-CDA Disclosure

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...

CVE-2026-126472

OpenEMR versions before 8.5.0 are affected by a missing authorization vulnerability in ccdaservice/ccda_gateway.php. This flaw allows an authenticated low-privilege staff user to access and exfiltrate C-CDA documents belonging to other patients. An attacker can perform this action by requesting v...