Openemr vulnerabilities
192 CVEs and advisories name Openemr as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-49142OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[]
- CVE-2026-76614OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore
- CVE-2026-40509OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter
- CVE-2026-40508OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler
- CVE-2026-40507OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal
- CVE-2026-40506OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php
- CVE-2026-67612OpenEMR 8.2.0 Stored XSS via import_template.php Template Management
- CVE-2026-67611OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration
- CVE-2026-67610OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access
- CVE-2026-39932OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection
- CVE-2026-39931OpenEMR Authenticated SQL Injection via backup.php Import Feature
- CVE-2026-46518OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics
- CVE-2026-34056OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data
- CVE-2026-34055OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification
- CVE-2026-34053OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler
- CVE-2026-34051OpenEMR has Improper ACL On Import/Export Popup
- CVE-2026-33934OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures
- CVE-2026-33933Reflected XSS via Unescaped contextName Parameter in Custom Template Editor
- CVE-2026-33932OpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml Attributes
- CVE-2026-33931OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access
- CVE-2026-33918OpenEMR Missing Authorization on Claim File Download Endpoint
- CVE-2026-33917OpenEMR has SQL Injection in CAMOS Form
- CVE-2026-33915OpenEMR Missing ACL Checks on Insurance Company API Routes
- CVE-2026-33914OpenEMR has SQL Injection in PostCalendar Category Delete
- CVE-2026-33913OpenEMR: XInclude Injection in CCDA Import Allows Reading Arbitrary Server Files
- CVE-2026-33912OpenEMR has reflected XSS in ajax_download.php via reportID parameter
- CVE-2026-33911OpenEMR vulnerable to reflected XSS in graphs.php via title parameter
- CVE-2026-33910OpenEMR has a SQL Injection Vulnerability in patient selection
- CVE-2026-33909OpenEMR Vulnerable to SQL Injection via Unsanitized Variables in MedEx Recall/Reminder Processing
- CVE-2026-33348OpenEMR has Stored XSS in patient encounter Eye Exam form $CHRONIC2 and $CHRONIC3