CVE-2026-124490: OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument

Published Nov 8, 2026

Updated

OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows authenticated attackers to read and write arbitrary files via the filepath parameter. Attackers can use action=download to read credentials and source code, or action=setup with base64 content to write web-executable files for code execution.

Event History

Nov 8, 2026

CVE Published

via MITRE·01:16 PM

Data Sourced

via MITRE·01:16 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to OpenEMR. The vulnerability is reachable remotely and requires no user interaction, but the provided data does not identify which authenticated roles have access to the affected functionality.

What impact can successful exploitation have?

An attacker can use the file_path parameter with action=download to read arbitrary files, including credentials and source code. With action=setup and base64-encoded content, they can write arbitrary files, including web-executable files that can lead to code execution.

Which versions are affected?

OpenEMR versions before 8.3.0 are affected. Updating to version 8.3.0 or later addresses the stated affected-version range.

CVE-2026-124490: OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument

Event History

Frequently Asked Questions

Who can exploit this issue?

What impact can successful exploitation have?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What impact can successful exploitation have?

Which versions are affected?