PT-2026-140001

OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacking high-sensitivity permission to read and modify encounter-bound forms via load form.php. Attackers can request the Clinical Notes or Care Plan direct loader to obtain restricted content...