Login Request a demo
OP
Vendor
Open-Emr
1 product with CVEs on record
221
CVEs
0
On KEV
0
New 30D
Products
OP
OpenEMR
Open-Emr
9.9
221 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-67611
OP
Openemr
Open-emr
8.1
1%
Aug 3OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration
CVE-2026-39932
OP
Openemr
Open-emr
9.1
2%
Aug 3OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection
CVE-2026-39931
OP
Openemr
Open-emr
7.2
1%
Aug 3OpenEMR Authenticated SQL Injection via backup.php Import Feature
CVE-2026-46518
OP
Openemr
Open-emr
8.7
0%
Jun 9OpenEMR: Stored XSS in prescription CSS/HTML print view via patient demographics
CVE-2023-54347
OP
OpenEMR
Open-Emr
7.5
1%
May 5OpenEMR 7.0.1 Authentication Brute Force Mitigation Bypass
CVE-2026-34056
OP
Openemr
Open-emr
6.5
0%
Mar 25OpenEMR has a Privilege Escalation that Allows a Low-Level User to View Admin-Only Data
CVE-2026-34055
OP
Openemr
Open-emr
6.3
0%
Mar 25OpenEMR has IDOR in Patient Notes Web UI allows unauthorized note access/modification
CVE-2026-34053
OP
Openemr
Open-emr
8.1
0%
Mar 25OpenEMR Missing Authorization in Procedure Order AJAX Deletion Handler
CVE-2026-34051
OP
Openemr
Open-emr
5.4
0%
Mar 25OpenEMR has Improper ACL On Import/Export Popup
CVE-2026-33934
OP
Openemr
Open-emr
4.3
0%
Mar 25OpenEMR's Missing Authorization in show-signature.php Allows Portal Patients to Read Staff Signatures
CVE-2026-33933
OP
Openemr
Open-emr
6.1
0%
Mar 25Reflected XSS via Unescaped contextName Parameter in Custom Template Editor
CVE-2026-33932
OP
Openemr
Open-emr
5.4
0%
Mar 25OpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml Attributes
CVE-2026-33931
OP
Openemr
Open-emr
6.5
0%
Mar 25OpenEMR has IDOR in Portal Payment Page that Allows Cross-Patient Record Access
CVE-2026-33918
OP
Openemr
Open-emr
8.8
0%
Mar 25OpenEMR Missing Authorization on Claim File Download Endpoint
CVE-2026-33917
OP
Openemr
Open-emr
8.8
0%
Mar 25OpenEMR has SQL Injection in CAMOS Form
CVE-2026-33915
OP
Openemr
Open-emr
5.4
0%
Mar 25OpenEMR Missing ACL Checks on Insurance Company API Routes
CVE-2026-33914
OP
Openemr
Open-emr
7.2
0%
Mar 25OpenEMR has SQL Injection in PostCalendar Category Delete
CVE-2026-33913
OP
Openemr
Open-emr
4.9
0%
Mar 25OpenEMR: XInclude Injection in CCDA Import Allows Reading Arbitrary Server Files
CVE-2026-33912
OP
Openemr
Open-emr
5.4
0%
Mar 25OpenEMR has reflected XSS in ajax_download.php via reportID parameter
CVE-2026-33911
OP
Openemr
Open-emr
5.4
0%
Mar 25OpenEMR vulnerable to reflected XSS in graphs.php via title parameter
CVE-2026-33910
OP
Openemr
Open-emr
8.8
0%
Mar 25OpenEMR has a SQL Injection Vulnerability in patient selection
CVE-2026-33909
OP
Openemr
Open-emr
5.9
0%
Mar 25OpenEMR Vulnerable to SQL Injection via Unsanitized Variables in MedEx Recall/Reminder Processing
CVE-2026-33348
OP
Openemr
Open-emr
5.4
0%
Mar 25OpenEMR has Stored XSS in patient encounter Eye Exam form $CHRONIC2 and $CHRONIC3
CVE-2026-32120
OP
Openemr
Open-emr
6.3
0%
Mar 25OpenEMR has IDOR in Fee Sheet Product Save
CVE-2026-29187
OP
Openemr
Open-emr
8.8
0%
Mar 25OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php
CVE-2026-33346
OP
Openemr
Open-emr
8.7
0%
Mar 19OpenEMR has stored XSS in portal_payment.php via Unescaped table_args
CVE-2026-33305
OP
Openemr
Open-emr
5.4
0%
Mar 19OpenEMR has Authorization Bypass in FaxSMS AppDispatch Constructor
CVE-2026-33304
OP
Openemr
Open-emr
6.5
0%
Mar 19OpenEMR has Authorization Bypass in Dated Reminders Log
CVE-2026-33303
OP
Openemr
Open-emr
5.4
0%
Mar 19OpenEMR Vulnerable to Stored XSS via Unescaped portal_login_username in Credential Print View
CVE-2026-33302
OP
Openemr
Open-emr
8.1
0%
Mar 19OpenEMR: zhAclCheck Ignores Explicit ACL Denies
CVE-2026-33321
OP
Openemr
Open-emr
7.6
0%
Mar 19OpenEMR has Out-of-Band Server-Side Request Forgery (OOB SSRF)
CVE-2026-33301
OP
Openemr
Open-emr
8.1
0%
Mar 19OpenEMR has arbitrary image file read via PDF generator
CVE-2026-33299
OP
Openemr
Open-emr
5.4
0%
Mar 19OpenEMR has Stored XSS in patient encounter Eye Exam form answers
CVE-2026-32119
OP
Openemr
Open-emr
4.4
0%
Mar 19OpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report page
CVE-2026-32238
OP
Openemr
Open-emr
9.1
2%
Mar 19OpenEMR has Remote Code Execution in backup functionality
CVE-2026-25928
OP
Openemr
Open-emr
6.5
1%
Mar 19OpenEMR Vulnerable to Path Traversal When Zipping DICOM Folders
CVE-2026-25744
OP
Openemr
Open-emr
6.5
0%
Mar 19OpenEMR: POST /api/.../vital Accepts Attacker-Supplied id and Overwrites Arbitrary Vitals
CVE-2026-25745
OP
Openemr
Open-emr
6.5
0%
Mar 18OpenEMR's Message Update Ignores Patient id
CVE-2026-32127
OP
Openemr
Open-emr
8.8
0%
Mar 11SQL Injection Vulnerability in ajax graphs library (OpenEMR)
CVE-2026-32126
OP
Openemr
Open-emr
8.1
0%
Mar 11OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans
CVE-2026-32125
OP
Openemr
Open-emr
5.4
0%
Mar 11OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels
CVE-2026-32124
OP
Openemr
Open-emr
5.4
0%
Mar 11OpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (Stored XSS)
CVE-2026-32123
OP
Openemr
Open-emr
6.5
0%
Mar 11OpenEMR: Therapy Group Sensitivity ACL No Longer Enforced
CVE-2026-32122
OP
Openemr
Open-emr
4.3
0%
Mar 11OpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)
CVE-2026-32121
OP
Openemr
Open-emr
5.4
0%
Mar 11OpenEMR: Stored DOM XSS via `.html()` in Portal Signer Modal
CVE-2026-32118
OP
Openemr
Open-emr
9.0
0%
Mar 11OpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation text
CVE-2026-24898
OP
Openemr
Open-emr
9.8
1%
Mar 3OpenEMR has an Unauthenticated MedEx Token Disclosure
CVE-2026-25146
OP
Openemr
Open-emr
8.1
0%
Mar 3OpenEMR's payments gateway_api_key secret rendered into client JS code
CVE-2026-24848
OP
Openemr
Open-emr
9.9
7%
Mar 3OpenEMR Arbitrary File Write leading to Remote Code Execution
CVE-2026-25147
OP
Openemr
Open-emr
7.1
0%
Feb 27OpenEMR's Portal Payment Endpoint Trusts User-Controlled pid
CVE-2026-24488
OP
Openemr
Open-emr
6.5
0%
Feb 27OpenEMR Vulnerable to Arbitrary File Exfiltration via Fax Endpoint
CVE-2026-27943
OP
Openemr
Open-emr
6.5
0%
Feb 26OpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter Ownership
CVE-2026-25930
OP
Openemr
Open-emr
6.5
0%
Feb 25OpenEMR's Printable LBF Endpoint Leaks Arbitrary Patient Forms
CVE-2026-25929
OP
Openemr
Open-emr
6.5
0%
Feb 25OpenEMR Patient Picture Context Allows Arbitrary Patient Photo Retrieval
CVE-2026-25927
OP
Openemr
Open-emr
7.1
0%
Feb 25OpenEMR Missing Authorization Checks in DICOM Viewer State API
CVE-2026-25746
OP
Openemr
Open-emr
8.8
4%
Feb 25OpenEMR has SQL Injection Vulnerability
CVE-2026-25743
OP
Openemr
Open-emr
4.8
0%
Feb 25OpenEMR has Stored XSS in Questionnaire answers
CVE-2026-25476
OP
Openemr
Open-emr
7.5
0%
Feb 25OpenEMR has Session Timeout Bypass via skip_timeout_reset
CVE-2026-25220
OP
Openemr
Open-emr
6.5
0%
Feb 25OpenEMR Messages "Show All" Not Restricted to Admins
CVE-2026-25164
OP
Openemr
Open-emr
8.1
0%
Feb 25OpenEMR's Document and Insurance REST Endpoints Skip ACL