84 matches found
CVE-2026-126439
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...
CVE-2026-126431
OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows authenticated Carecoordination users to store malicious C-CDA field identifiers through the savedata action. Attackers can inject SQL into the IN clause built by fetchFormValues during C-CDA generation to extract...
CVE-2026-126417
OpenEMR before 8.5.0 contains an access control flaw in getclaimfile.php: with location=tmp, it serves any file in the shared temporary directory without verifying the file is a claim for the caller. Users with acct/eob or acct/bill write access can request key=ccda.xml to download the most...
EUVD-2026-125026
OpenEMR before 8.5.0 contains an access control flaw in getclaimfile.php: with location=tmp, it serves any file in the shared temporary directory without verifying the file is a claim for the caller. Users with acct/eob or acct/bill write access can request key=ccda.xml to download the most...
EUVD-2026-125012
OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows authenticated Carecoordination users to store malicious C-CDA field identifiers through the savedata action. Attackers can inject SQL into the IN clause built by fetchFormValues during C-CDA generation to extract...
CVE-2026-126439 OpenEMR before 8.5.0 Authorization Bypass via C-CDA Gateway ccda_gateway.php
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...
CVE-2026-126439
OpenEMR versions before 8.5.0 are vulnerable to an authorization bypass in the ccdaservice/ccda_gateway.php component. The root cause is a failure to enforce the patients/pat_rep permission, allowing any authenticated core session to bypass restrictions. Exploiting this, an attacker without prope...
EUVD-2026-125004
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...
CVE-2026-126439 OpenEMR before 8.5.0 Authorization Bypass via C-CDA Gateway ccda_gateway.php
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...
CVE-2026-126472
OpenEMR versions before 8.5.0 are affected by a missing authorization vulnerability in ccdaservice/ccda_gateway.php. This flaw allows an authenticated low-privilege staff user to access and exfiltrate C-CDA documents belonging to other patients. An attacker can perform this action by requesting v...
CVE-2026-126472 OpenEMR before 8.5.0 Missing Authorization in ccdaservice/ccda_gateway.php C-CDA Disclosure
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...
CVE-2026-126472 OpenEMR before 8.5.0 Missing Authorization in ccdaservice/ccda_gateway.php C-CDA Disclosure
OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that allows any authenticated low-privilege staff user to retrieve other patients' C-CDA documents. Attackers can request the view or dl action with sequential pid values and their own CSRF token to...
EUVD-2026-18605
A vulnerability was identified in Align Technology My Invisalign App 3.12.4 on Android. The impacted element is an unknown function of the file com/aligntech/myinvisalign/BuildConfig.java of the component com.aligntech.myinvisalign.emea. The manipulation of the argument CDAACCESSTOKEN leads to us...
CVE-2026-5456
A vulnerability was identified in Align Technology My Invisalign App 3.12.4 on Android. The impacted element is an unknown function of the file com/aligntech/myinvisalign/BuildConfig.java of the component com.aligntech.myinvisalign.emea. The manipulation of the argument CDAACCESSTOKEN leads to us...
Malicious Package
Overview @cda-apps/source is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in @cda-apps/source (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5806c1f8be7708beab46a8c3d8c222da577363ce72533ed3fb40aadd28a7c2 The package @cda-apps/source was found to contain malicious code. Source: ghsa-malware 356aaa5e677bd040b40c0cec9325f05ae0c9e0e05c364bc0db6ba9837d4607...
Malware in @cda-apps/source
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
EUVD-2026-3267
Malicious code in @cda-apps/source npm...