CVE-2026-126443

EUVD-2026-125000
OpenEMR before 8.5.0 contains a missing authorization vulnerability in dynamic_finder_ajax.php that allows authenticated users without patients/demo permission to query patient demographics. Attackers can supply arbitrary patient_data columns via the sColumns parameter to enumerate names, dates of birth, contact details, and Social Security numbers across the practice.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 29.53%
Common Weakness Enumeration
References
https://github.com/openemr/openemr/security/advisories/GHSA-79g8-hm7q-xrh4
https://www.vulncheck.com/advisories/openemr-before-8.5.0-missing-authorization-via-dynamic-finder-ajax-php-patient-finder