Vulnerabilities in OpenEMR
148 resultsCVE-2026-103021MEDIUMOpenEMR: Username Enumeration via Pre-Authentication User Settings LoadingEPSS 0.3%CVE-2026-33909MEDIUMOpenEMR Vulnerable to SQL Injection via Unsanitized Variables in MedEx Recall/Reminder ProcessingEPSS 0.3%CVE-2026-103935HIGHOpenEMR: Stored XSS via `text()` Misuse in Double-Quoted HTML AttributeEPSS 0.3%CVE-2026-40507MEDIUMOpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient PortalEPSS 0.3%CVE-2026-33346HIGHOpenEMR has stored XSS in portal_payment.php via Unescaped table_argsEPSS 0.3%CVE-2026-32118MEDIUMOpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation textEPSS 0.3%CVE-2025-30149MEDIUMOpenEMR Reflected XSS in AJAX ScriptEPSS 0.3%CVE-2026-33302HIGHOpenEMR: zhAclCheck Ignores Explicit ACL DeniesEPSS 0.3%CVE-2026-33304MEDIUMOpenEMR has Authorization Bypass in Dated Reminders LogEPSS 0.3%CVE-2026-104137HIGHOpenEMR: Patient Data Search Without Sufficient ACLEPSS 0.3%CVE-2026-104136HIGHOpenEMR: Arbitrary Patient Recall and Contact Detail ReadEPSS 0.3%CVE-2026-24487MEDIUMOpenEMR has FHIR Patient Compartment Bypass in CareTeam ResourceEPSS 0.3%CVE-2026-25124MEDIUMOpenEMR has Broken Access Control in Report/Clients/Message List CSV ExportEPSS 0.3%CVE-2026-25127HIGHOpenEMR has Broken Access Control on Care Coordination ModuleEPSS 0.3%CVE-2026-104138MEDIUMOpenEMR: Missing authorization on QRDA Category I/III download endpointsEPSS 0.3%CVE-2026-32126HIGHOpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and PlansEPSS 0.3%CVE-2026-104139MEDIUMOpenEMR: Missing Authorization on Document Template Download Endpoint Allows Any Authenticated User to Read Another Patient's PHIEPSS 0.3%CVE-2026-104134MEDIUMOpenEMR: Missing authorization in person-search AJAX leaks patient demographics (name, DOB, phone, email)EPSS 0.3%CVE-2026-27943MEDIUMOpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter OwnershipEPSS 0.3%CVE-2026-25929MEDIUMOpenEMR Patient Picture Context Allows Arbitrary Patient Photo RetrievalEPSS 0.3%