Skip to content
Openemr Openemr vulnerabilities
-
open-emr openemr
OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument
CVE-2026-124490
9.4 Critical
-
open-emr openemr
OpenEMR before 8.3.0 Broken Access Control via portal_payment.php
CVE-2026-124489
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encounters
CVE-2026-124488
8.6 High
-
open-emr openemr
OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docref
CVE-2026-124487
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Missing Authorization in Classic Document Controller
CVE-2026-124486
8.7 High
-
open-emr openemr
OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents API
CVE-2026-124485
7.1 High
-
open-emr openemr
OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIs
CVE-2026-124484
8.7 High
-
open-emr openemr
OpenEMR before 8.4.0 Improper Authorization via Prescription REST API
CVE-2026-124483
8.7 High
-
open-emr openemr
OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launch
CVE-2026-124482
7.1 High
-
open-emr openemr
OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Payments
CVE-2026-124481
7.1 High
-
open-emr openemr
OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKEN
CVE-2026-124480
8.7 High
-
open-emr openemr
OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download
CVE-2026-124479
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php
CVE-2026-124478
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.php
CVE-2026-124477
8.7 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.php
CVE-2026-124476
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patient
CVE-2026-124475
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update API
CVE-2026-124473
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.php
CVE-2026-124472
8.6 High
-
open-emr openemr
OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.php
CVE-2026-124471
8.6 High
-
open-emr openemr
OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists
CVE-2026-124470
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter
CVE-2026-124469
9.4 Critical
-
open-emr openemr
OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST API
CVE-2026-124468
7.1 High
-
open-emr openemr
OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload
CVE-2026-124467
8.7 High
-
open-emr openemr
OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uri
CVE-2026-124466
6.9 Medium
-
open-emr openemr
OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponse
CVE-2026-124464
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View
CVE-2026-124463
9.3 Critical
-
open-emr openemr
OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameter
CVE-2026-124462
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint
CVE-2026-124461
8.6 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientController
CVE-2026-124460
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlers
CVE-2026-124459
8.6 High
-
open-emr openemr
OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via Person Endpoint
CVE-2026-124458
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eraname
CVE-2026-124457
7.2 High
-
open-emr openemr
OpenEMR before 8.3.0 Missing Authorization and IDOR in Prior-Authorizations Module
CVE-2026-124456
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR via Portal OnsiteDocument Pid_Equals Mass-Assignment
CVE-2026-124455
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR in Portal Patient Settings via persist.php
CVE-2026-124453
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Stored XSS via Eye Exam Document Notes
CVE-2026-124452
5.1 Medium
-
open-emr openemr
OpenEMR before 8.4.0 Authorization Bypass via checkUserHasAccessToPatient in SMART on FHIR
CVE-2026-124451
6.0 Medium
-
open-emr openemr
OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument
CVE-2026-124450
Public exploit
9.3 Critical
-
open-emr openemr
OpenEMR before 8.4.0 Missing Authorization via FHIR Media and QuestionnaireResponse Routes
CVE-2026-124449
7.1 High
-
open-emr openemr
OpenEMR before 8.3.0 Stored XSS via CCDA/CCD Preview XSLT Attributes
CVE-2026-124448
8.6 High
-
open-emr openemr
OpenEMR before 8.3.0 IDOR via OnsitePortalActivityController Update Endpoint
CVE-2026-124447
8.6 High
-
open-emr openemr
OpenEMR before 8.3.0 Arbitrary File Read and Write via FaxSMS disposeDocument
CVE-2026-124446
8.7 High
-
open-emr openemr
OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Force
CVE-2026-124445
9.3 Critical
-
open-emr openemr
OpenEMR before 8.4.0 SQL Injection via OnsiteDocument Query API
CVE-2026-124444
7.1 High
-
open-emr openemr
OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment
CVE-2026-102940
9.6 Critical
-
open-emr openemr
OpenEMR: Username Enumeration via Pre-Authentication User Settings Loading
CVE-2026-103021
5.3 Medium
-
open-emr openemr
OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions
CVE-2026-103020
5.3 Medium
-
open-emr openemr
OpenEMR: Unauthenticated Open Redirect via OIDC End Session Endpoint
CVE-2026-103019
4.3 Medium
-
open-emr openemr
OpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)
CVE-2026-104134
6.5 Medium
-
open-emr openemr
OpenEMR: Weno `file_download.php`: missing ACL/CSRF truncates the e-prescribing pharmacy directory
CVE-2026-103939
5.4 Medium
- Show olderLoading…