Login Request a demo
OP
Vendor
openemr
2 products with CVEs on record
109
CVEs
0
On KEV
1
New 30D
Products
OP
openemr
openemr
9.9
102 CVEs0 on KEV1 new
OP
openemr/openemr
openemr
8.3
7 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-49142
New
OP
openemr
openemr
8.8–Oct 29OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
CVE-2026-76614
OP
openemr
openemr
4.3
0%
Aug 19OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore
CVE-2026-40509
OP
openemr
openemr
4.3
0%
Aug 19OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter
CVE-2026-40508
OP
openemr
openemr
5.4
0%
Aug 19OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler
CVE-2026-40507
OP
openemr
openemr
6.1
0%
Aug 19OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal
CVE-2026-40506
OP
openemr
openemr
6.5
1%
Aug 17OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php
CVE-2026-67612
OP
openemr
openemr
4.8
0%
Aug 3OpenEMR 8.2.0 Stored XSS via import_template.php Template Management
CVE-2026-67611
OP
openemr
openemr
8.1
1%
Aug 3OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration
CVE-2026-67610
OP
openemr
openemr
8.1
0%
Aug 3OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access
CVE-2026-39932
OP
openemr
openemr
9.1
2%
Aug 3OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection
CVE-2026-39931
OP
openemr
openemr
7.2
1%
Aug 3OpenEMR Authenticated SQL Injection via backup.php Import Feature
CVE-2026-46518
OP
openemr
openemr
8.7
0%
Jun 9OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics
CVE-2026-34056
OP
openemr
openemr
6.5
0%
Mar 25OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data
CVE-2026-34055
OP
openemr
openemr
6.3
0%
Mar 25OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification
CVE-2026-34053
OP
openemr
openemr
8.1
0%
Mar 25OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler
CVE-2026-34051
OP
openemr
openemr
5.4
0%
Mar 25OpenEMR has Improper ACL On Import/Export Popup
CVE-2026-33934
OP
openemr
openemr
4.3
0%
Mar 25OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures
CVE-2026-33933
OP
openemr
openemr
6.1
0%
Mar 25Reflected XSS via Unescaped contextName Parameter in Custom Template Editor
CVE-2026-33932
OP
openemr
openemr
5.4
0%
Mar 25OpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml Attributes
CVE-2026-33931
OP
openemr
openemr
6.5
0%
Mar 25OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access
CVE-2026-33918
OP
openemr
openemr
8.8
0%
Mar 25OpenEMR Missing Authorization on Claim File Download Endpoint
CVE-2026-33917
OP
openemr
openemr
8.8
0%
Mar 25OpenEMR has SQL Injection in CAMOS Form
CVE-2026-33915
OP
openemr
openemr
5.4
0%
Mar 25OpenEMR Missing ACL Checks on Insurance Company API Routes
CVE-2026-33914
OP
openemr
openemr
7.2
0%
Mar 25OpenEMR has SQL Injection in PostCalendar Category Delete
CVE-2026-33913
OP
openemr
openemr
4.9
0%
Mar 25OpenEMR: XInclude Injection in CCDA Import Allows Reading Arbitrary Server Files
CVE-2026-33912
OP
openemr
openemr
5.4
0%
Mar 25OpenEMR has reflected XSS in ajax_download.php via reportID parameter
CVE-2026-33911
OP
openemr
openemr
5.4
0%
Mar 25OpenEMR vulnerable to reflected XSS in graphs.php via title parameter
CVE-2026-33910
OP
openemr
openemr
8.8
0%
Mar 25OpenEMR has a SQL Injection Vulnerability in patient selection
CVE-2026-33909
OP
openemr
openemr
5.9
0%
Mar 25OpenEMR Vulnerable to SQL Injection via Unsanitized Variables in MedEx Recall/Reminder Processing
CVE-2026-33348
OP
openemr
openemr
5.4
0%
Mar 25OpenEMR has Stored XSS in patient encounter Eye Exam form $CHRONIC2 and $CHRONIC3
CVE-2026-32120
OP
openemr
openemr
6.3
0%
Mar 25OpenEMR has IDOR in Fee Sheet Product Save
CVE-2026-29187
OP
openemr
openemr
8.8
0%
Mar 25OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php
CVE-2026-33346
OP
openemr
openemr
8.7
0%
Mar 19OpenEMR has stored XSS in portal_payment.php via Unescaped table_args
CVE-2026-33305
OP
openemr
openemr
5.4
0%
Mar 19OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor
CVE-2026-33304
OP
openemr
openemr
6.5
0%
Mar 19OpenEMR has Authorization Bypass in Dated Reminders Log
CVE-2026-33303
OP
openemr
openemr
5.4
0%
Mar 19OpenEMR Vulnerable to Stored XSS via Unescaped portal_login_username in Credential Print View
CVE-2026-33302
OP
openemr
openemr
8.1
0%
Mar 19OpenEMR: zhAclCheck Ignores Explicit ACL Denies
CVE-2026-33321
OP
openemr
openemr
7.6
0%
Mar 19OpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF)
CVE-2026-33301
OP
openemr
openemr
8.1
0%
Mar 19OpenEMR has arbitrary image file read via PDF generator
CVE-2026-33299
OP
openemr
openemr
5.4
0%
Mar 19OpenEMR has Stored XSS in patient encounter Eye Exam form answers
CVE-2026-32119
OP
openemr
openemr
4.4
0%
Mar 19OpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report page
CVE-2026-32238
OP
openemr
openemr
9.1
2%
Mar 19OpenEMR has Remote Code Execution in backup functionality
CVE-2026-25928
OP
openemr
openemr
6.5
1%
Mar 19OpenEMR Vulnerable to Path Traversal When Zipping DICOM Folders
CVE-2026-25744
OP
openemr
openemr
6.5
0%
Mar 19OpenEMR: POST /api/.../vital Accepts Attacker-Supplied id and Overwrites Arbitrary Vitals
CVE-2026-25745
OP
openemr
openemr
6.5
0%
Mar 18OpenEMR's Message Update Ignores Patient id
CVE-2026-32127
OP
openemr
openemr
8.8
0%
Mar 11SQL Injection Vulnerability in ajax graphs library (OpenEMR)
CVE-2026-32126
OP
openemr
openemr
8.1
0%
Mar 11OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans
CVE-2026-32125
OP
openemr
openemr
5.4
0%
Mar 11OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels
CVE-2026-32124
OP
openemr
openemr
5.4
0%
Mar 11OpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (Stored XSS)
CVE-2026-32123
OP
openemr
openemr
6.5
0%
Mar 11OpenEMR: Therapy Group Sensitivity ACL No Longer Enforced
CVE-2026-32122
OP
openemr
openemr
4.3
0%
Mar 11OpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)
CVE-2026-32121
OP
openemr
openemr
5.4
0%
Mar 11OpenEMR: Stored DOM XSS via `.html()` in Portal Signer Modal
CVE-2026-32118
OP
openemr
openemr
9.0
0%
Mar 11OpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation text
CVE-2026-24898
OP
openemr
openemr
9.8
1%
Mar 3OpenEMR has an Unauthenticated MedEx Token Disclosure
CVE-2026-25146
OP
openemr
openemr
8.1
0%
Mar 3OpenEMR's payments gateway_api_key secret rendered into client JS code
CVE-2026-24848
OP
openemr
openemr
9.9
7%
Mar 3OpenEMR Arbitrary File Write leading to Remote Code Execution
CVE-2026-25147
OP
openemr
openemr
7.1
0%
Feb 27OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid
CVE-2026-24488
OP
openemr
openemr
6.5
0%
Feb 27OpenEMR Vulnerable to Arbitrary File Exfiltration via Fax Endpoint
CVE-2026-27943
OP
openemr
openemr
6.5
0%
Feb 26OpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter Ownership
CVE-2026-25930
OP
openemr
openemr
6.5
0%
Feb 25OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient Forms