What’s Vulnerable › Vulnerabilities

CVE-2026-24890: OpenEMR Portal Users Can Forge Provider Signatures

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-25 · updated 2026-06-17
• Weakness: CWE-285

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an authorization bypass vulnerability in the patient portal signature endpoint allows authenticated portal users to upload and overwrite provider signatures by setting `type=admin-signature` and specifying any provider user ID. This could potentially lead to signature forgery on medical documents, legal compliance violations, and fraud. The issue occurs when portal users are allowed to modify provider signatures without proper authorization checks. Version 8.0.0 fixes the issue.

Affected products

• openemr: before 8.0.0 — fixed in 8.0.0

How to fix

Upgrade to a fixed version: openemr 8.0.0. Check the vendor advisory for mitigations.

References

• https://github.com/openemr/openemr/commit/a29c0f7ac0975429a85cd09a3ff12ee0dcdb4478
• https://github.com/openemr/openemr/security/advisories/GHSA-xc8x-mfh8-9xvh
• https://github.com/openemr/openemr/security/advisories/GHSA-xc8x-mfh8-9xvh

Get alerted when CVE-2026-24890 or the next vulnerability affects your stack