# CVE-2026-124446

Path traversal in OpenEMR FaxSMS lets authenticated users read/overwrite arbitrary files.

- Page: https://www.vulneraibility.com/cve/CVE-2026-124446
- CVSS: 8.7
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.35% (percentile 28.8)
- Weakness: CWE-73
- Also known as: GHSA-x2vr-jgg8-c57c
- Published: 2026-11-08

## Affected versions

- openemr: affected < 8.3.0; fixed in 8.3.0

A version outside these ranges is not a statement that it is unaffected.

## Impact

Authenticated low‑privilege users can read sensitive files (e.g., sqlconf.php) and overwrite web‑writable files, enabling credential theft, persistence, or site compromise.

## Action

Immediate action required

## Recommendation

Upgrade to OpenEMR 8.3.0+, restrict FaxSMS access, and rotate exposed credentials.

## References

- [advisory] https://github.com/openemr/openemr/security/advisories/GHSA-x2vr-jgg8-c57c
- [advisory] https://www.vulncheck.com/advisories/openemr-before-8.3.0-arbitrary-file-read-and-write-via-faxsms-disposedocument

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.