CVE-2026-67611 OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration

OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an unauthenticated client registration endpoint. Attackers can register an OAut...

CVE-2026-65884: Improper Access Control

Joomla Extension - balbooa.com - Privilege Escalation in Gridbox 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors to register new accounts with administrative permissions...

The vulnerability of the Incoming Goods Suite registration method, related to lack of access control, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Incoming Goods Suite registration and delivery method is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to compromise the integrity and accessibility of the protected information...

The vulnerability of the Incoming Goods Suite registration method, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Incoming Goods Suite registration tool is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...