Skip to content
OpenAdvisories

Vendor

openemr

170 known vulnerabilities.

Products

openemr 133 openemr/openemr 37
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2026-33917 Public exploit

    OpenEMR has SQL Injection in CAMOS Form

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax_save CAMOS form that can be exploited by authenticated attackers. The vulnerab…

    openemr openemr
  • High 7.2
    CVE-2026-33910 Public exploit

    OpenEMR has a SQL Injection Vulnerability in patient selection

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attacke…

    openemr openemr
  • High 8.1
    CVE-2026-29187 Public exploit

    OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php

    OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Injection vulnerability exists in the Patient Search functionality (/interface/new/new_search_popup.php). The vulner…

    openemr openemr
  • Critical 9.1
    CVE-2026-32238 Public exploit

    OpenEMR has Remote Code Execution in backup functionality

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the backup functionality that can be exploited by authenticated attackers. The vuln…

    openemr openemr
  • High 8.8
    CVE-2026-32127 Public exploit

    SQL Injection Vulnerability in ajax graphs library (OpenEMR)

    OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the ajax graphs library that can be exploited by authenticated attackers. The vulnerab…

    openemr openemr
  • High 8.8
    CVE-2026-25746 Public exploit

    OpenEMR has SQL Injection Vulnerability

    OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can be exploited by authenticated attackers. The vulnerability exists d…

    openemr openemr
  • Critical 10.0
    CVE-2026-24849 Public exploit

    OpenEMR Arbitrary File Read Vulnerability

    OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions.php` allows authenticated users to read arbitrary files from the server filesys…

    openemr openemr