CVE-2026-124489

OpenEMR versions prior to 8.3.0 are susceptible to a broken access control vulnerability in the portal/portal_payment.php component. The root cause is an authorization bypass (CWE-639) that occurs when low-privilege authenticated users tamper with the pid and form_pid parameters. This allows atta...

CVE-2026-124476

OpenEMR before version 8.3.0 is vulnerable to an Insecure Direct Object Reference (IDOR) in portal/lib/paylib.php. The application fails to validate the request-supplied form_pid (or patient_id_cc in Sphere data) against the session patient before writing to onsite_portal_activity. This allows au...