CVE-2026-124490
openemr
Published 8 Nov 2026 · updated 8 Nov 2026 · Received
9.4 Critical · CVSS 4.0, vulncheck.com
Description
OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms that allows authenticated attackers to read and write arbitrary files via the file_path parameter. Attackers can use action=download to read credentials and source code, or action=setup with base64 content to write web-executable files for code execution.