Skip to contentOpen-emr Openemr vulnerabilities
- open-emr openemrOpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocumentCVE-2026-1244909.4 Critical
- open-emr openemrOpenEMR before 8.3.0 Broken Access Control via portal_payment.phpCVE-2026-1244897.1 High
- open-emr openemrOpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity EncountersCVE-2026-1244888.6 High
- open-emr openemrOpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docrefCVE-2026-1244877.1 High
- open-emr openemrOpenEMR before 8.3.0 Missing Authorization in Classic Document ControllerCVE-2026-1244868.7 High
- open-emr openemrOpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents APICVE-2026-1244857.1 High
- open-emr openemrOpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIsCVE-2026-1244848.7 High
- open-emr openemrOpenEMR before 8.4.0 Improper Authorization via Prescription REST APICVE-2026-1244838.7 High
- open-emr openemrOpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient LaunchCVE-2026-1244827.1 High
- open-emr openemrOpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal PaymentsCVE-2026-1244817.1 High
- open-emr openemrOpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKENCVE-2026-1244808.7 High
- open-emr openemrOpenEMR before 8.4.0 Arbitrary File Read via REST Document DownloadCVE-2026-1244797.1 High
- open-emr openemrOpenEMR before 8.3.0 Missing Authorization via addRecall in save.phpCVE-2026-1244787.1 High
- open-emr openemrOpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.phpCVE-2026-1244778.7 High
- open-emr openemrOpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.phpCVE-2026-1244767.1 High
- open-emr openemrOpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patientCVE-2026-1244757.1 High
- open-emr openemrOpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update APICVE-2026-1244737.1 High
- open-emr openemrOpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.phpCVE-2026-1244728.6 High
- open-emr openemrOpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.phpCVE-2026-1244718.6 High
- open-emr openemrOpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem ListsCVE-2026-1244707.1 High
- open-emr openemrOpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameterCVE-2026-1244699.4 Critical
- open-emr openemrOpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST APICVE-2026-1244687.1 High
- open-emr openemrOpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax uploadCVE-2026-1244678.7 High
- open-emr openemrOpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uriCVE-2026-1244666.9 Medium
- open-emr openemrOpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponseCVE-2026-1244647.1 High
- open-emr openemrOpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print ViewCVE-2026-1244639.3 Critical
- open-emr openemrOpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid ParameterCVE-2026-1244627.1 High
- open-emr openemrOpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php EndpointCVE-2026-1244618.6 High
- open-emr openemrOpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientControllerCVE-2026-1244607.1 High
- open-emr openemrOpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save HandlersCVE-2026-1244598.6 High
- open-emr openemrOpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person EndpointCVE-2026-1244587.1 High
- open-emr openemrOpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eranameCVE-2026-1244577.2 High
- open-emr openemrOpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations ModuleCVE-2026-1244567.1 High
- open-emr openemrOpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-AssignmentCVE-2026-1244557.1 High
- open-emr openemrOpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.phpCVE-2026-1244537.1 High
- open-emr openemrOpenEMR before 8.3.0 Stored XSS via Eye Exam Document NotesCVE-2026-1244525.1 Medium
- open-emr openemrOpenEMR before 8.4.0 Authorization Bypass via checkUserHasAccessToPatient in SMART on FHIRCVE-2026-1244516.0 Medium
- open-emr openemrOpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocumentCVE-2026-124450Public exploit9.3 Critical
- open-emr openemrOpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse RoutesCVE-2026-1244497.1 High
- open-emr openemrOpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT AttributesCVE-2026-1244488.6 High
- open-emr openemrOpenEMR before 8.3.0 IDOR via OnsitePortalActivityController Update EndpointCVE-2026-1244478.6 High
- open-emr openemrOpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocumentCVE-2026-1244468.7 High
- open-emr openemrOpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute ForceCVE-2026-1244459.3 Critical
- open-emr openemrOpenEMR before 8.4.0 SQL Injection via OnsiteDocument Query APICVE-2026-1244447.1 High
- open-emr openemrOpenEMR: Missing Write ACL Allows Unauthorized Document ReassignmentCVE-2026-1029409.6 Critical
- open-emr openemrOpenEMR: Username Enumeration via Pre-Authentication User Settings LoadingCVE-2026-1030215.3 Medium
- open-emr openemrOpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and VersionsCVE-2026-1030205.3 Medium
- open-emr openemrOpenEMR: Unauthenticated Open Redirect via OIDC End Session EndpointCVE-2026-1030194.3 Medium
- open-emr openemrOpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)CVE-2026-1041346.5 Medium
- open-emr openemrOpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directoryCVE-2026-1039395.4 Medium
- Show olderLoading…