---
id: CVE-2026-65983
title: >-
  OpenEMR FaxSMS module: insecure staging of decrypted patient documents in
  webroot
summary: >-
  OpenEMR is a free and open source electronic health records and medical
  practice management application. Prior to 8.2.0,
  interface/modules/custom_modules/oe-module-faxsms/src/Controller/SignalWireClient.php
  decrypts a selected patient do…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-552
  - CWE-200
vendor: openemr
product: openemr
affected:
  - openemr < 8.2.0
published: '2026-11-05'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T19:52:57.438Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-65983'
references:
  - url: 'https://github.com/openemr/openemr/security/advisories/GHSA-vv5j-6gjw-ffx9'
    label: 'https://github.com/openemr/openemr/security/advisories/GHSA-vv5j-6gjw-ffx9'
  - url: 'https://github.com/openemr/openemr/pull/12766'
    label: 'https://github.com/openemr/openemr/pull/12766'
  - url: >-
      https://github.com/openemr/openemr/commit/406bb7015e894c243936b0817d7c7060686a13d9
    label: >-
      https://github.com/openemr/openemr/commit/406bb7015e894c243936b0817d7c7060686a13d9
  - url: 'https://github.com/openemr/openemr/releases/tag/v8_2_0'
    label: 'https://github.com/openemr/openemr/releases/tag/v8_2_0'
tags:
  - cve.org
ingestedAt: '2026-11-05T22:38:31.603Z'
---

## Overview

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.2.0, interface/modules/custom_modules/oe-module-faxsms/src/Controller/SignalWireClient.php decrypts a selected patient document with Document::get_data() and SignalWireClient::uploadFileForFax() writes the plaintext bytes under sites/{siteId}/fax. The module returns the resulting public URL to SignalWire, protects it only with a predictable uniqid() filename, and never removes the staged file. An unauthenticated network actor who obtains or guesses the URL can retrieve persistent patient documents even when drive encryption is enabled. This issue is fixed in version 8.2.0.

## Affected

- `openemr < 8.2.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.