CVE-2026-124450

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 8, 2026

Last Seen

November 8, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Vulnerability in OpenEMR Enables Remote Code Execution78.0

A vulnerability (CVE-2026-124450) has been identified in OpenEMR versions prior to 8.3.0, specifically within the fax/sms module. The flaw involves broken access control and path traversal through an unvalidated file_path parameter. This allows authenticated low-privilege users to read sensitive fil...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Vulnerability in OpenEMR Enables Remote Code Execution

9h ago·2 sources

Related Entities

Zero-day Exploit CWE-200 - Exposure of Sensitive Information CWE-22 - Path Traversal T1203 - Exploitation for Client Execution Broken Access Control Path Traversal

CVE-2026-124450

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Vulnerability in OpenEMR Enables Remote Code Execution

Related Articles (1)

NVD-CVE-2026-124450

Related Entities