https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T16:50:45.254123+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124484 fkie_cve-2026-124484 2026-11-10T16:50:45.258191+00:00

OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any authenticated core user to access cross-patient documents. Attackers can omit the patientId parameter and supply arbitrary record IDs to list, read, and overwrite other patients' portal documents, signatures, and template data.

 https://db.gcve.eu/vuln/ghsa-cgxm-9969-q9j6 GHSA-cgxm-9969-q9j6 2026-11-10T16:50:45.258301+00:00

OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs that allows any authenticated core user to access cross-patient documents. Attackers can omit the patientId parameter and supply arbitrary record IDs to list, read, and overwrite other patients' portal documents, signatures, and template data.