CVE-2026-49142 - OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
CVE ID :CVE-2026-49142 Published : Oct. 29, 2026, 1:17 p.m. | 1 hour, 7 minutes ago Description :OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary...