CVE-2026-67611 OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAut...

The vulnerability of the Incoming Goods Suite registration method, related to lack of access control, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Incoming Goods Suite registration and delivery method is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity and accessibility of the protected information...

The vulnerability of the Incoming Goods Suite registration method, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Incoming Goods Suite registration tool is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...