CVE-2026-104136

The OpenEMR electronic health records application is vulnerable to an improper access control issue (CWE-284) in versions prior to 8.3.0 . Specifically, the new_recall branch of interface/main/messages/save.php fails to enforce patient-level or recall-workflow authorization when processing a call...