CVE-2026-25744

OpenEMR prior to 8.0.0.2 exposes a vulnerability in the encounter vitals API: it accepts an id in the request body and updates that vital without verifying ownership of the patient/encounter. An authenticated user with encounters/notes permission can overwrite another patient’s vitals, enabling m...