CVE-2026-126479

OpenEMR before 8.5.0 contains a missing authorization vulnerability in five Module Manager InstallerController actions that lack the admin/managemodules ACL check and CSRF validation. Low-privilege users such as Front Office accounts can POST to saveConfig or SaveHooks to overwrite any module's...

EUVD-2026-124945

OpenEMR before 8.5.0 contains a missing authorization vulnerability in five Module Manager InstallerController actions that lack the admin/managemodules ACL check and CSRF validation. Low-privilege users such as Front Office accounts can POST to saveConfig or SaveHooks to overwrite any module's...

CVE-2026-126479 OpenEMR before 8.5.0 Missing Authorization in Module Manager Installer Actions

OpenEMR before 8.5.0 contains a missing authorization vulnerability in five Module Manager InstallerController actions that lack the admin/managemodules ACL check and CSRF validation. Low-privilege users such as Front Office accounts can POST to saveConfig or SaveHooks to overwrite any module's...

CVE-2026-126479

OpenEMR versions before 8.5.0 are susceptible to a missing authorization vulnerability within five Module Manager InstallerController actions. The root cause is the absence of the admin/manage_modules ACL check and CSRF validation . This allows low-privilege users, such as Front Office accounts, ...

CVE-2026-115231

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that th...

CVE-2026-115231 User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that th...

EUVD-2026-115718

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that th...

CVE-2026-115231 User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that th...

CVE-2026-115231

Eclipse ThreadX versions 6.0.1 through 6.5.2.202603 are vulnerable to a flaw where the Module Manager allows a user-mode, memory-protected module to post a forged callback request to another module's request queue. Because the receiving module's callback thread executes the function pointer witho...

CVE-2026-115654

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and...

CVE-2026-118052

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such an image blocks every later module loa...

CVE-2026-115654

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603 , the Module Manager's thread-control services fail to verify that a thread passed by a user-mode, memory-protected module actually belongs to that module. This Improper Access Control allows any loaded module to suspend, resume, terminate, r...

CVE-2026-115654 User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and...

CVE-2026-115654 User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and...

EUVD-2026-115242

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and...

CVE-2026-115654 User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and...

CVE-2026-118052 Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such an image blocks every later module loa...

EUVD-2026-115230

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such an image blocks every later module loa...

CVE-2026-118052

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, a vulnerability exists in the Module Manager loaders . When a module preamble declares a data or stack size that overflows the allocation arithmetic, the loader returns an overflow error but fails to release the Module Manager mutex . This f...

CVE-2026-118052 Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without releasing the Module Manager mutex when a module preamble declares a data or stack size that overflows the allocation arithmetic. Loading such an image blocks every later module loa...