CVE-2026-126482

OpenEMR before 8.5.0 contains an SQL injection vulnerability in SLEOB::slInvoiceNumber in src/Billing/SLEOB.php, which concatenates the CLP01 claim identifier from uploaded X12 835 ERA files into a query without escaping or parameter binding. Authenticated users with billing permissions, or a...

CVE-2026-126482

OpenEMR versions before 8.5.0 are vulnerable to an SQL injection in the SLEOB::slInvoiceNumber() function located in src/Billing/SLEOB.php. The root cause is the lack of escaping or parameter binding when the application concatenates the CLP01 claim identifier from uploaded X12 835 ERA files into...

EUVD-2026-124942

OpenEMR before 8.5.0 contains an SQL injection vulnerability in SLEOB::slInvoiceNumber in src/Billing/SLEOB.php, which concatenates the CLP01 claim identifier from uploaded X12 835 ERA files into a query without escaping or parameter binding. Authenticated users with billing permissions, or a...