High severity7.2NVD Advisory· Published Nov 8, 2026

CVE-2026-124466

Description

OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send HTTP requests by registering an OAuth2 client with an unvalidated jwks_uri. Attackers can trigger the fetch via the token introspection endpoint with an unsigned client_assertion to probe internal services and reach cloud metadata endpoints.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Openemr/Openemrllm-fuzzy
Range: <8.4.0

Patches

Vulnerability mechanics

References

github.com/openemr/openemr/security/advisories/GHSA-mf6h-xc62-9fg4nvd
www.vulncheck.com/advisories/openemr-before-8.4.0-unauthenticated-ssrf-via-oauth2-client-jwks-urinvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000