OOpenEMR

Products

Exploited and recent CVEs

• CVE-2026-102940 Critical 9.6 OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment 0.4%
• CVE-2026-103021 Medium 5.3 OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading 0.3%
• CVE-2026-103020 Medium 5.3 OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions 0.4%
• CVE-2026-103019 Medium 4.3 OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint 0.3%
• CVE-2026-104134 Medium 6.5 OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email) 0.3%
• CVE-2026-103939 Medium 5.4 OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory 0.4%
• CVE-2026-104138 Medium 6.5 OpenEMR: Missing authorization on QRDA Category I/III download endpoints 0.3%
• CVE-2026-115573 High 8.1 OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration 0.4%
• CVE-2026-104133 High 7.1 OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall 0.4%
• CVE-2026-103935 High 8.1 OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute 0.3%
• CVE-2026-104135 Medium 6.5 OpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth 0.4%
• CVE-2026-104136 High 7.1 OpenEMR: Arbitrary Patient Recall and Contact Detail Read 0.3%
• CVE-2026-103938 High 7.1 OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations 0.2%
• CVE-2026-104137 High 7.1 OpenEMR: Patient Data Search Without Sufficient ACL 0.3%
• CVE-2026-104139 Medium 6.5 OpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI 0.3%
• CVE-2026-65983 High 7.5 OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroot 0.2%
• CVE-2026-49142 High 8.8 OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] 0.4%
• CVE-2026-76614 Medium 4.3 OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore 0.4%
• CVE-2026-40509 Medium 4.3 OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter 0.2%
• CVE-2026-40508 Medium 5.4 OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler 0.3%
• CVE-2026-40507 Medium 6.1 OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal 0.3%
• CVE-2026-40506 Medium 6.5 OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php 0.7%
• CVE-2026-67612 Medium 4.8 OpenEMR 8.2.0 Stored XSS via import_template.php Template Management 0.3%
• CVE-2026-67611 High 8.1 OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration 0.8%
• CVE-2026-67610 High 8.1 OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access 0.5%
• CVE-2026-39932 Critical 9.1 OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection 2.0%
• CVE-2026-39931 High 7.2 OpenEMR Authenticated SQL Injection via backup.php Import Feature 0.6%
• CVE-2026-46518 High 7.7 OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics 0.2%
• CVE-2026-34056 High 7.7 OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data 0.3%
• CVE-2026-34055 High 8.1 OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification 0.3%