Skip to content
OpenAdvisories

Vendor

Open-Emr

195 known vulnerabilities.

Products

openemr 158 openemr/openemr 37
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-124450 Public exploit

    OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument

    OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated file_path parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials …

    Open-Emr openemr
  • Critical 9.1
    CVE-2026-32238 Public exploit

    OpenEMR has Remote Code Execution in backup functionality

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the backup functionality that can be exploited by authenticated attackers. The vuln…

    Open-Emr openemr
  • Critical 10.0
    CVE-2026-24849 Public exploit

    OpenEMR Arbitrary File Read Vulnerability

    OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions.php` allows authenticated users to read arbitrary files from the server filesys…

    Open-Emr openemr