Openemr vulnerabilities
192 CVEs and advisories name Openemr as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-124490OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument
- CVE-2026-124489OpenEMR before 8.3.0 Broken Access Control via portal_payment.php
- CVE-2026-124488OpenEMR before 8.3.0 Authorization Bypass via load_form.php High-Sensitivity Encounters
- CVE-2026-124487OpenEMR before 8.4.0 Improper Authorization in FHIR DocumentReference $docref
- CVE-2026-124486OpenEMR before 8.3.0 Missing Authorization in Classic Document Controller
- CVE-2026-124485OpenEMR before 8.3.0 Cross-Patient Document Disclosure via Onsite Documents API
- CVE-2026-124484OpenEMR before 8.4.0 Missing Authorization in Portal Onsite-Document APIs
- CVE-2026-124483OpenEMR before 8.4.0 Improper Authorization via Prescription REST API
- CVE-2026-124482OpenEMR before 8.4.0 Cross-Patient PHI Exfiltration via SMART Patient Launch
- CVE-2026-124481OpenEMR before 8.4.0 Cross-Patient Payment Tampering via Rainforest Portal Payments
- CVE-2026-124480OpenEMR before 8.4.0 Authorization Bypass via FHIR QuestionnaireResponse APICSRFTOKEN
- CVE-2026-124479OpenEMR before 8.4.0 Arbitrary File Read via REST Document Download
- CVE-2026-124478OpenEMR before 8.3.0 Missing Authorization via addRecall in save.php
- CVE-2026-124477OpenEMR before 8.3.0 Missing Authorization via delete_Recall in save.php
- CVE-2026-124476OpenEMR before 8.3.0 IDOR via form_pid in portal/lib/paylib.php
- CVE-2026-124475OpenEMR before 8.3.0 IDOR via portal/lib/persist.php setting_patient
- CVE-2026-124473OpenEMR before 8.3.0 Broken Object Authorization via SOAP Note Update API
- CVE-2026-124472OpenEMR before 8.3.0 Missing Authorization via sl_eob_patient_note.php
- CVE-2026-124471OpenEMR before 8.3.0 Missing Authorization and IDOR via sl_eob_invoice.php
- CVE-2026-124470OpenEMR before 8.3.0 BOLA via portal_custom_report.php Exposes Patient Problem Lists
- CVE-2026-124469OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter
- CVE-2026-124468OpenEMR before 8.3.0 SQL Injection via Patient Insurance and Employer REST API
- CVE-2026-124467OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload
- CVE-2026-124466OpenEMR before 8.4.0 Unauthenticated SSRF via OAuth2 Client jwks_uri
- CVE-2026-124464OpenEMR before 8.4.0 FHIR Patient Compartment Bypass via QuestionnaireResponse
- CVE-2026-124463OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View
- CVE-2026-124462OpenEMR before 8.3.0 Patient Portal IDOR via Case-Sensitive Pid Parameter
- CVE-2026-124461OpenEMR before 8.3.0 IDOR via DICOM library/ajax/upload.php Endpoint
- CVE-2026-124460OpenEMR before 8.3.0 IDOR in Patient Portal PortalPatientController
- CVE-2026-124459OpenEMR before 8.3.0 Cross-Patient IDOR via Encounter Form Viewers and Save Handlers