EUVD-2026-125024

OpenEMR before 8.5.0 contains a missing authorization vulnerability in the esignformsubmit handler of library/ESign/Form/Controller.php that verifies only the caller's password, not access to the patient, encounter, or form type. Authenticated core users can supply arbitrary formId, formDir, and...