Vulnerability · Published Mar 3, 2026 · Assigned by GitHub_M

CVE-2026-24848OpenEMR Arbitrary File Write leading to Remote Code Execution

High 8.7

In plain English

A high-severity path traversal in openemr from openemr. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 7.2% (higher than 94% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)7.2%top 5.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDocument() method in EtherFaxActions.php allows authenticated users to write arbitrary content to arbitrary locations on the server filesystem. This vulnerability can be exploited to achieve Remote Code Execution (RCE) by uploading malicious PHP web shells.

Affected products (as reported)

Vendor	Product	Versions
openemr	openemr	<= 7.0.4

Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://github.com/openemr/openemr/security/advisories/GHSA-5vp5-4rm6-h4c9 x_refsource_CONFIRM