CVE-2026-27943 | OpenEMR up to 8.0.0 eye_mag form_id authorization (GHSA-q96x-qw99-6xq9)

A vulnerability marked as problematic has been reported in OpenEMR up to 8.0.0. This impacts the function eye_mag. The manipulation of the argument form_id leads to authorization bypass.

This vulnerability is traded as CVE-2026-27943. It is possible to initiate the attack remotely. There is no exploit available.

To fix this issue, it is recommended to deploy a patch.