{
  "title": "CVE of the day — CVE-2026-124469 (CVSS 9,9, critic)",
  "title_variants": [
    {
      "id": "v0",
      "title": "CVE of the day — CVE-2026-124469 (CVSS 9,9, critic)"
    },
    {
      "id": "v1",
      "title": "CVE-2026-124469: critical vulnerability, CVSS 9,9/10, type SQL injection, exploitable"
    }
  ],
  "description": "CVE-2026-124469: critical vulnerability, CVSS 9,9/10, type SQL injection, exploitable remotely, with low privileges, without user interaction. OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the..",
  "keywords": [
    "c",
    "cve-2026-124469",
    "vulnerability",
    "critical vulnerability",
    "cwe-89",
    "cvs",
    "cybersecurity",
    "cybersecurity",
    "♪",
    "security update"
  ],
  "scenes": [
    {
      "title": "CVE-2026- 1244",
      "subtitle": "CVSS 9,9",
      "text": "CVE-2026-124469: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database."
    },
    {
      "title": "SQL injection",
      "subtitle": "SQL injection · CVSS v3.1",
      "text": "OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause.."
    },
    {
      "title": "EXPOSURE AND MITIGATION",
      "subtitle": "remotely exploitable, with low privileges, without user interaction",
      "text": "Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ],
  "publication_date": "2026-11-10T04:26:03.944Z",
  "duration": 20,
  "topic": "cve",
  "lang": "en",
  "translation_group": "cve-2026-11-10",
  "poster": "cve-2026-11-10-en.jpg",
  "preview": "cve-2026-11-10-en.gif",
  "og_card": "cve-2026-11-10-en.og.jpg",
  "audiogram": "cve-2026-11-10-en.audiogram.mp4",
  "captions": "cve-2026-11-10-en.vtt",
  "generation": {
    "procedural": true,
    "ai_generated": [
      "background",
      "voice"
    ],
    "real_data_source": "official public API",
    "filmed_real_event": false,
    "disclosure": "Procedurally generated from real public-source data; abstract AI-generated backgrounds; synthetic (TTS) voice. No real event is filmed or altered."
  },
  "transcript_text": "CVE-2026-124469: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database. OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause.. Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD.",
  "transcript": [
    {
      "start": 0,
      "end": 6.667,
      "text": "CVE-2026-124469: Critical gravity, CVSS score 9.9 out of 10 according to the National Vulnerability Database."
    },
    {
      "start": 6.667,
      "end": 13.333,
      "text": "OpenEMR before 8.3.0 contains an SQL injection vulnerability in the Fee Drug-inventory lookup (DrugSalesService::sellDrug) that interpolates the prod[N][warehouse] POST field into an ORDER BY clause.."
    },
    {
      "start": 13.333,
      "end": 20,
      "text": "Remotely exploitable Vulnerability, with low privileges, without user interaction. Apply the update of the supplier promptly and consult the official notice on NVD."
    }
  ]
}