Threats tagged 'ghsa-mvff-cgm7-frvw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.2	CVE-2026-126486OpenEMR before 8.5.0 contains a missing authorization vulnerability in portal/import_template.php, where several High7.22026-11-13GCVE DatabaseCVE-2026-126486 OpenEMR versions prior to 8.5.0 have a missing authorization vulnerability in the portal/import_template.php component. Several portal document template modes lack proper admin/forms ACL and CSRF protections. Authenticated staff users can exploit this to delete all template profile assignments, push templates to patients, change categories, and read template bodies without proper authorization. Report on CVE-2026-126486 Vulnerability CWE-862 #ghsa-mvff-cgm7-frvw	GCVE Database	2026-11-13

Page 1 of 1