What’s Vulnerable › Products

openemr vulnerabilities

229 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 99 published in the last 12 months.

Check whether your openemr version is affected

Latest openemr vulnerabilities

• CVE-2026-49142 — OpenEMR Before 8.5.0 SQL Injection via form_icd_codes[] (CVSS 8.8)
• CVE-2026-76614 — OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore (CVSS 4.3)
• CVE-2026-40509 — OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter (CVSS 4.3)
• CVE-2026-40508 — OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler (CVSS 5.4)
• CVE-2026-40507 — OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal (CVSS 6.1)
• CVE-2026-40506 — OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php (CVSS 6.5)
• CVE-2026-67612 — OpenEMR 8.2.0 Stored XSS via import_template.php Template Management (CVSS 4.8)
• CVE-2026-67611 — OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration (CVSS 8.1)
• CVE-2026-67610 — OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access (CVSS 8.1)
• CVE-2026-39932 — OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection (CVSS 9.1)
• CVE-2026-39931 — OpenEMR Authenticated SQL Injection via backup.php Import Feature (CVSS 7.2)
• CVE-2026-46518 — OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics (CVSS 8.7)
• CVE-2023-54347 — OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass (CVSS 7.5)
• CVE-2026-34056 — OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data (CVSS 6.5)
• CVE-2026-34055 — OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification (CVSS 6.3)
• CVE-2026-34053 — OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler (CVSS 8.1)
• CVE-2026-34051 — OpenEMR has Improper ACL On Import/Export Popup (CVSS 5.4)
• CVE-2026-33934 — OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures (CVSS 4.3)
• CVE-2026-33933 — Reflected XSS via Unescaped contextName Parameter in Custom Template Editor (CVSS 6.1)
• CVE-2026-33932 — OpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml Attributes (CVSS 5.4)
• CVE-2026-33931 — OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access (CVSS 6.5)
• CVE-2026-33918 — OpenEMR Missing Authorization on Claim File Download Endpoint (CVSS 8.8)
• CVE-2026-33917 — OpenEMR has SQL Injection in CAMOS Form (CVSS 8.8)
• CVE-2026-33915 — OpenEMR Missing ACL Checks on Insurance Company API Routes (CVSS 5.4)
• CVE-2026-33914 — OpenEMR has SQL Injection in PostCalendar Category Delete (CVSS 7.2)