https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T02:39:00.955871+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-124478 fkie_cve-2026-124478 2026-11-12T02:39:00.957390+00:00

OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall action of /interface/main/messages/save.php that allows low-privileged authenticated users to modify arbitrary patients' recall data. Attackers can submit a crafted new_pid with recall, contact, provider, facility, and notification preference fields to overwrite records of patients they cannot access.

 https://db.gcve.eu/vuln/ghsa-3v64-jh34-wvm3 GHSA-3v64-jh34-wvm3 2026-11-12T02:39:00.957467+00:00

OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall action of /interface/main/messages/save.php that allows low-privileged authenticated users to modify arbitrary patients' recall data. Attackers can submit a crafted new_pid with recall, contact, provider, facility, and notification preference fields to overwrite records of patients they cannot access.