CVE-2026-124461: OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint

OpenEMR before 8.3.0 contains a missing authorization vulnerability in library/ajax/upload.php that allows any authenticated user to read and overwrite document data by supplying an arbitrary docid. Low-privilege users can enumerate docid values with the fetch and save actions to disclose patient health information and tamper with medical records across all patients.