CVE-2026-40506

OpenEMR before 8.2.0 is vulnerable: the db GET parameter in standard_tables_manage.php is passed unsanitized to temp_dir_cleanup(), allowing path traversal and recursive deletion of arbitrary directories. Chaining with an open redirect in dicom_frame.php enables an unauthenticated attacker to tri...