CVE-2026-126490

EUVD-2026-125134
OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru("groups") and discloses the web server's Unix group memberships. Authenticated attackers with fax module access can supply a nonexistent jid value to reveal groups such as adm or shadow, aiding privilege escalation planning.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.1 LOW
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 18.57%
Affected Products (NVD)
VendorProductVersion
open-emropenemr
𝑥
< 8.5.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/openemr/openemr/security/advisories/GHSA-wc2f-fvpv-c32r
https://www.vulncheck.com/advisories/openemr-before-8.5.0-information-disclosure-via-debug-code-in-fax-view-php