{
  "url": "https://www.videodioggi.com/cve-2026-11-10-en.html",
  "title": "CVE of the day — CVE-2026-124469 (CVSS 9,9, critic)",
  "language": "en",
  "published": "2026-11-10T04:26:04.016Z",
  "modified": "2026-11-10T04:26:04.016Z",
  "summary": "CVE-2026-124469: critical vulnerability, CVSS 9,9/10, type SQL injection, exploitable remotely, with low privileges, without user interaction. OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the..",
  "keywords": [
    "c",
    "cve-2026-124469",
    "vulnerability",
    "critical vulnerability",
    "cwe-89",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "key_facts": [
    "CVE-2026- 1244 — CVE-2026-124469: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database.",
    "Sql injection — OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause..",
    "Exposure and mitigation — Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
  ],
  "transcript": "CVE-2026-124469: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database. OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause.. Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "video": {
    "mp4": "https://www.videodioggi.com/videos/cve-2026-11-10-en.mp4",
    "poster": "https://www.videodioggi.com/videos/cve-2026-11-10-en.jpg",
    "duration_seconds": 20
  },
  "source": "www.videodioggi.com",
  "generator": "videodioggi procedural video engine"
}