https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T11:48:49.924973+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124477 CVE-2026-124477 — OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.php 2026-11-11T11:48:49.930472+00:00

Affected: openemr

OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete arbitrary patient recall records via the delete_Recall action. Attackers can send POST requests to /interface/main/messages/save.php with a target pid and r_ID to remove recall data without ACL or ownership checks.