What is GHSA-pfrx-3wpm-pv74?

GHSA-pfrx-3wpm-pv74 is a security advisory published by GitHub Security Advisories with High severity. OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics()...

Which CVE IDs does GHSA-pfrx-3wpm-pv74 cover?

GHSA-pfrx-3wpm-pv74 covers the following CVE IDs: CVE-2026-126491. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pfrx-3wpm-pv74?

GHSA-pfrx-3wpm-pv74 has a CVSS v3 base score of 7.6, published by GitHub Security Advisories.

GHSA-pfrx-3wpm-pv74HighCVSS 7.6

OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics()...

Vendor

GitHub Security Advisories

Published

November 13, 2026

Last Modified

November 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-126491 →

📋 Description

OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics() where layout_options field_id values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious field_id, allowing any authenticated low-privilege user to exfiltrate data from patient_data and users_secure tables.

🔗 References (4)

https://github.com/openemr/openemr/security/advisories/GHSA-pc2q-9pcw-v899
https://nvd.nist.gov/vuln/detail/CVE-2026-126491
https://www.vulncheck.com/advisories/openemr-before-8.5.0-sql-injection-via-getbypatientdemographics-in-patient-inc-php
https://github.com/advisories/GHSA-pfrx-3wpm-pv74