Openemr vulnerabilities
192 CVEs and advisories name Openemr as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-25929OpenEMR Patient Picture Context Allows Arbitrary Patient Photo Retrieval
- CVE-2026-25927OpenEMR Missing Authorization Checks in DICOM Viewer State API
- CVE-2026-25746OpenEMR has SQL Injection Vulnerability
- CVE-2026-25743OpenEMR has Stored XSS in Questionnaire answers
- CVE-2026-25476OpenEMR has Session Timeout Bypass via skip_timeout_reset
- CVE-2026-25220OpenEMR Messages "Show All" Not Restricted to Admins
- CVE-2026-25164OpenEMR's Document and Insurance REST Endpoints Skip ACL
- CVE-2026-24908OpenEMR has SQL Injection in Patient API Sort Parameter
- CVE-2026-24890OpenEMR Portal Users Can Forge Provider Signatures
- CVE-2026-24487OpenEMR has FHIR Patient Compartment Bypass in CareTeam Resource
- CVE-2026-23627OpenEMR has SQL Injection in Immunization Search/Report
- CVE-2026-25135OpenEMR's location resource for Group.$export operation returns entire patient/user population contact information
- CVE-2026-25131OpenEMR has Broken Access Control in Procedures Configuration
- CVE-2026-25127OpenEMR has Broken Access Control on Care Coordination Module
- CVE-2026-25124OpenEMR has Broken Access Control in Report/Clients/Message List CSV Export
- CVE-2026-24896OpenEMR has Broken Access Control that allows unauthorized access to EDI Logs
- CVE-2026-24849OpenEMR Arbitrary File Read Vulnerability
- CVE-2026-24847OpenEMR has Open Redirect in Eye Exam Form
- CVE-2026-21443OpenEMR allows inconsistent escaping of translation function output
- CVE-2025-69231OpenEMR has a Stored XSS in GAD-7 Form that Enables Session Hijacking and Privilege Escalation
- CVE-2025-68277OpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and Portal
- CVE-2025-67752OpenEMR Has Disabled SSL Certificate Verification in HTTP Client
- CVE-2025-67491OpenEMR has Stored XSS in ub04 helper
- CVE-2025-67645OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint
- CVE-2025-54373OpenEMR may expose Contents of Clinical Notes and Care Planto users who do not have Sensitivities=high privilege
- CVE-2025-43860OpemEMR Vulnerable to Stored XSS Attack in the Additional Address Section of Patient Demographics
- CVE-2025-32967OpenEMR doesn't log password administration properly
- CVE-2025-32794OpenEMR Stored XSS via Patient Name Field in Procedure Orders
- CVE-2025-31121OpenEMR allows XSS in Patient Image feature
- CVE-2025-31117OpenEMR Out-of-Band Server-Side Request Forgery (OOB SSRF) Vulnerability