OpenEMR OpenEMR

• CVE-2026-102940 Critical 9.6 OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment 0.4%
• CVE-2026-103021 Medium 5.3 OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading 0.3%
• CVE-2026-103020 Medium 5.3 OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions 0.4%
• CVE-2026-103019 Medium 4.3 OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint 0.3%
• CVE-2026-104134 Medium 6.5 OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email) 0.3%
• CVE-2026-103939 Medium 5.4 OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory 0.4%
• CVE-2026-104138 Medium 6.5 OpenEMR: Missing authorization on QRDA Category I/III download endpoints 0.3%
• CVE-2026-115573 High 8.1 OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration 0.4%
• CVE-2026-104133 High 7.1 OpenEMR: Missing authorization in DORN `compendium_install.php` — non-admin destructive lab-compendium reinstall 0.4%
• CVE-2026-103935 High 8.1 OpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML Attribute 0.3%
• CVE-2026-104135 Medium 6.5 OpenEMR: Missing authorization in payment patient-search AJAX leaks patient directory and dates of birth 0.4%
• CVE-2026-104136 High 7.1 OpenEMR: Arbitrary Patient Recall and Contact Detail Read 0.3%
• CVE-2026-103938 High 7.1 OpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen Operations 0.2%
• CVE-2026-104137 High 7.1 OpenEMR: Patient Data Search Without Sufficient ACL 0.3%
• CVE-2026-104139 Medium 6.5 OpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHI 0.3%
• CVE-2026-65983 High 7.5 OpenEMR FaxSMS module: insecure staging of decrypted patient documents in webroot 0.2%
• CVE-2026-49142 High 8.8 OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] 0.4%
• CVE-2026-76614 Medium 4.3 OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore 0.4%
• CVE-2026-40509 Medium 4.3 OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter 0.2%
• CVE-2026-40508 Medium 5.4 OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler 0.3%
• CVE-2026-40507 Medium 6.1 OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal 0.3%
• CVE-2026-40506 Medium 6.5 OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php 0.7%
• CVE-2026-67612 Medium 4.8 OpenEMR 8.2.0 Stored XSS via import_template.php Template Management 0.3%
• CVE-2026-67611 High 8.1 OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration 0.8%
• CVE-2026-67610 High 8.1 OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access 0.5%
• CVE-2026-39932 Critical 9.1 OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection 2.0%
• CVE-2026-39931 High 7.2 OpenEMR Authenticated SQL Injection via backup.php Import Feature 0.6%
• CVE-2026-46518 High 7.7 OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics 0.2%
• CVE-2026-34056 High 7.7 OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data 0.3%
• CVE-2026-34055 High 8.1 OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification 0.3%
• CVE-2026-34053 High 7.1 OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler 0.4%
• CVE-2026-34051 Medium 5.4 OpenEMR has Improper ACL On Import/Export Popup 0.2%
• CVE-2026-33934 Medium 4.3 OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures 0.2%
• CVE-2026-33933 Medium 6.1 Reflected XSS via Unescaped contextName Parameter in Custom Template Editor 0.3%
• CVE-2026-33932 High 7.6 OpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml Attributes 0.2%
• CVE-2026-33931 Medium 6.5 OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access 0.4%
• CVE-2026-33918 High 7.6 OpenEMR Missing Authorization on Claim File Download Endpoint 0.3%
• CVE-2026-33917 High 8.8 OpenEMR has SQL Injection in CAMOS Form 0.5%
• CVE-2026-33915 Medium 5.4 OpenEMR Missing ACL Checks on Insurance Company API Routes 0.2%
• CVE-2026-33914 High 7.2 OpenEMR has SQL Injection in PostCalendar Category Delete 0.4%
• CVE-2026-33913 High 7.7 OpenEMR: XInclude Injection in CCDA Import Allows Reading Arbitrary Server Files 0.3%
• CVE-2026-33912 Medium 5.4 OpenEMR has reflected XSS in ajax_download.php via reportID parameter 0.2%
• CVE-2026-33911 Medium 5.4 OpenEMR vulnerable to reflected XSS in graphs.php via title parameter 0.2%
• CVE-2026-33910 High 7.2 OpenEMR has a SQL Injection Vulnerability in patient selection 0.4%
• CVE-2026-33909 Medium 5.9 OpenEMR Vulnerable to SQL Injection via Unsanitized Variables in MedEx Recall/Reminder Processing 0.3%
• CVE-2026-33348 High 8.7 OpenEMR has Stored XSS in patient encounter Eye Exam form $CHRONIC2 and $CHRONIC3 0.3%
• CVE-2026-32120 Medium 6.5 OpenEMR has IDOR in Fee Sheet Product Save 0.3%
• CVE-2026-29187 High 8.1 OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php 0.5%
• CVE-2026-33346 High 8.7 OpenEMR has stored XSS in portal_payment.php via Unescaped table_args 0.3%
• CVE-2026-33305 Medium 5.4 OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor 0.2%