Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#OpenEMR

1 articles

Deep Dive

OpenEMR IDOR Exposes Any Patient Document (CVE-2026-102940)

Any signed-in OpenEMR user can move another patient's document to a record they can read, bypassing document access controls. Fixed in 8.4.0.

Ostorlab Team
Nov 06, 2026