CVE-2026-126439

OpenEMR versions before 8.5.0 are vulnerable to an authorization bypass in the ccdaservice/ccda_gateway.php component. The root cause is a failure to enforce the patients/pat_rep permission, allowing any authenticated core session to bypass restrictions. Exploiting this, an attacker without prope...

CVE-2026-126439 OpenEMR before 8.5.0 Authorization Bypass via C-CDA Gateway ccda_gateway.php

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...

EUVD-2026-125004

OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccdagateway.php that fails to enforce the patients/patrep permission, accepting any authenticated core session. Authenticated users without patient-report permission can request the reportccdview action to retrieve...