OP
Product
openmrs-core
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add openmrs-core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41258 | 9.1 | May 15 | OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange Affected: >= 2.7.0 < 2.7.9; >= 2.8.0 < 2.8.6 |
| CVE-2026-40076 | 8.8 | May 6 | OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload Affected: <= 2.7.8; >= 2.8.0, <= 2.8.5 |
| CVE-2026-40075 | 7.5 | May 5 | OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet Affected: <= 2.7.8; >= 2.8.0, <= 2.8.5 |
Showing 3