https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T04:19:47.178112+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-124478 CVE-2026-124478 — OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php 2026-11-12T04:19:47.179751+00:00

Affected: openemr

OpenEMR before 8.3.0 contains a missing authorization vulnerability in the addRecall action of /interface/main/messages/save.php that allows low-privileged authenticated users to modify arbitrary patients' recall data. Attackers can submit a crafted new_pid with recall, contact, provider, facility, and notification preference fields to overwrite records of patients they cannot access.