CVE-2026-126444 · Runtime
NO FIX YET · SEE WHAT TO DO
OpenEMR before 8.5.0 has a missing authorization check in its Ensora eRx integration. An authenticated staff user without the patients/rx permission can request eRx.php directly and read selected patients' demographic, medication and allergy data.
first public Oct 28, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Clinics and practices running OpenEMR before 8.5.0 with the Ensora eRx integration in use are exposed. The attacker must already be a logged-in staff user, but one lacking the patients/rx permission can still reach prescription data by requesting the eRx endpoint directly. Installations on 8.5.0 or later, or without the eRx integration, are not affected.
Not affected if erx-integration-disabled, version-8.5.0-or-later
Who cares ehr, healthcare, openemr, php, self-hosted
version.php).8.5.0 or later.OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows authenticated staff without patients/rx permission to access prescription data by directly requesting eRx.php. Attackers can expose selected patients' demographic, medication, and allergy data in the vendor XML and trigger eRx synchronization state changes.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.