CVE Find is a real-time vulnerability database indexing 420 945 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 3353 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-124490 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeD... |
9.1 |
Critical |
|
CVE-2026-124486 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.3.0 contains a missing authorization vulnerability in the classic document controll... Authorization problems |
8.8 |
High |
|
CVE-2026-124484 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.4.0 contains a missing authorization vulnerability in portal onsite-document APIs t... Authorization problems |
8.8 |
High |
|
CVE-2026-124483 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST... Authorization problems |
8.3 |
High |
|
CVE-2026-124480 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.4.0 contains an authorization bypass vulnerability that allows low-privileged authe... Authorization problems |
8.8 |
High |
|
CVE-2026-124477 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.3.0 contains a missing authorization vulnerability that allows low-privileged authe... Authorization problems |
8.8 |
High |
|
CVE-2026-124469 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Sheet drug-inventory lookup ... SQL Injection |
9.9 |
Critical |
|
CVE-2026-124467 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.4.0 contains a local file inclusion in the ESign router (library/ESign/Router.php),... Directory Traversal |
8.8 |
High |
|
CVE-2026-124463 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability that allows authenticated ... Cross-site Scripting |
8.7 |
High |
|
CVE-2026-124450 |
2026-11-08 14h18 +00:00 |
OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sm... |
9.9 |
Critical |