Skip to contentOpenemr vulnerabilities
Newest
- open-emr openemrOpenEMR has Authorization Bypass in Dated Reminders LogCVE-2026-333046.5 Medium
- open-emr openemrOpenEMR Vulnerable to Stored XSS via Unescaped portal_login_username in Credential Print ViewCVE-2026-333035.4 Medium
- open-emr openemrOpenEMR: zhAclCheck Ignores Explicit ACL DeniesCVE-2026-333027.3 High
- open-emr openemrOpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF)CVE-2026-333217.2 High
- open-emr openemrOpenEMR has arbitrary image file read via PDF generatorCVE-2026-333017.1 High
- open-emr openemrOpenEMR has Stored XSS in patient encounter Eye Exam form answersCVE-2026-332998.5 High
- open-emr openemrOpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report pageCVE-2026-321194.4 Medium
- open-emr openemrOpenEMR has Remote Code Execution in backup functionalityCVE-2026-32238Public exploit9.1 Critical
- open-emr openemrOpenEMR Vulnerable to Path Traversal When Zipping DICOM FoldersCVE-2026-259286.5 Medium
- open-emr openemrOpenEMR: POST /api/.../vital Accepts Attacker-Supplied id and Overwrites Arbitrary VitalsCVE-2026-257446.5 Medium
- open-emr openemrOpenEMR's Message Update Ignores Patient idCVE-2026-257456.5 Medium
- open-emr openemrSQL Injection Vulnerability in ajax graphs library (OpenEMR)CVE-2026-32127Public exploit8.8 High
- open-emr openemrOpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and PlansCVE-2026-321267.1 High
- open-emr openemrOpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/LabelsCVE-2026-321255.4 Medium
- open-emr openemrOpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (Stored XSS)CVE-2026-321245.4 Medium
- open-emr openemrOpenEMR: Therapy Group Sensitivity ACL No Longer EnforcedCVE-2026-321237.7 High
- open-emr openemrOpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)CVE-2026-321224.3 Medium
- open-emr openemrOpenEMR: Stored DOM XSS via `.html()` in Portal Signer ModalCVE-2026-321217.7 High
- open-emr openemrOpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation textCVE-2026-321185.4 Medium
- open-emr openemrOpenEMR has an Unauthenticated MedEx Token DisclosureCVE-2026-2489810.0 Critical
- open-emr openemrOpenEMR's payments gateway_api_key secret rendered into client JS codeCVE-2026-251469.6 Critical
- open-emr openemrOpenEMR Arbitrary File Write leading to Remote Code ExecutionCVE-2026-248488.7 High
- open-emr openemrOpenEMR's Portal Payment Endpoint Trusts User-Controlled pidCVE-2026-251477.1 High
- open-emr openemrOpenEMR Vulnerable to Arbitrary File Exfiltration via Fax EndpointCVE-2026-244886.5 Medium
- open-emr openemrOpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter OwnershipCVE-2026-279436.5 Medium
- open-emr openemrOpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient FormsCVE-2026-259306.5 Medium
- open-emr openemrOpenEMR Patient Picture Context Allows Arbitrary Patient Photo RetrievalCVE-2026-259296.5 Medium
- open-emr openemrOpenEMR Missing Authorization Checks in DICOM Viewer State APICVE-2026-259277.1 High
- open-emr openemrOpenEMR has SQL Injection VulnerabilityCVE-2026-25746Public exploit8.8 High
- open-emr openemrOpenEMR has Stored XSS in Questionnaire answersCVE-2026-257437.2 High
- open-emr openemrOpenEMR has Session Timeout Bypass via skip_timeout_resetCVE-2026-254767.5 High
- open-emr openemrOpenEMR Messages "Show All" Not Restricted to AdminsCVE-2026-252205.7 Medium
- open-emr openemrOpenEMR's Document and Insurance REST Endpoints Skip ACLCVE-2026-251648.1 High
- open-emr openemrOpenEMR has SQL Injection in Patient API Sort ParameterCVE-2026-2490810.0 Critical
- open-emr openemrOpenEMR Portal Users Can Forge Provider SignaturesCVE-2026-248908.1 High
- open-emr openemrOpenEMR has FHIR Patient Compartment Bypass in CareTeam ResourceCVE-2026-244875.7 Medium
- open-emr openemrOpenEMR has SQL Injection in Immunization Search/ReportCVE-2026-236277.4 High
- open-emr openemrOpenEMR's location resource for Group.$export operation returns entire patient/user population contact informationCVE-2026-251354.5 Medium
- open-emr openemrOpenEMR has Broken Access Control in Procedures ConfigurationCVE-2026-251318.8 High
- open-emr openemrOpenEMR has Broken Access Control on Care Coordination ModuleCVE-2026-251277.0 High
- open-emr openemrOpenEMR has Broken Access Control in Report/Clients/Message List CSV ExportCVE-2026-251246.5 Medium
- open-emr openemrOpenEMR has Broken Access Control that allows unauthorized access to EDI LogsCVE-2026-248966.5 Medium
- open-emr openemrOpenEMR Arbitrary File Read VulnerabilityCVE-2026-24849Public exploit10.0 Critical
- open-emr openemrOpenEMR has Open Redirect in Eye Exam FormCVE-2026-248476.1 Medium
- open-emr openemrOpenEMR allows inconsistent escaping of translation function outputCVE-2026-214431.2 Low
- open-emr openemrOpenEMR has a Stored XSS in GAD-7 Form that Enables Session Hijacking and Privilege EscalationCVE-2025-692318.7 High
- open-emr openemrOpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and PortalCVE-2025-682777.2 High
- open-emr openemrOpenEMR Has Disabled SSL Certificate Verification in HTTP ClientCVE-2025-677528.1 High
- open-emr openemrOpenEMR has Stored XSS in ub04 helperCVE-2025-674918.5 High
- open-emr openemrOpenEMR Vulnerable to Broken Access Control in Profile Edit EndpointCVE-2025-676458.8 High
- Show moreLoading…