Vulnerabilities in OpenEMR
148 resultsCVE-2026-65983HIGHOpenEMR FaxSMS module: insecure staging of decrypted patient documents in webrootEPSS 0.2%CVE-2026-33932HIGHOpenEMR has Stored XSS in CCDA Preview via Unsanitized linkHtml AttributesEPSS 0.2%CVE-2026-40509MEDIUMOpenEMR < 8.3.0 CSRF via DICOM Viewer web_path ParameterEPSS 0.2%CVE-2025-68277HIGHOpenEMR allows links sent via Secure Messaging to be opened in OpenEMR and PortalEPSS 0.2%CVE-2026-33299HIGHOpenEMR has Stored XSS in patient encounter Eye Exam form answersEPSS 0.2%CVE-2026-21443LOWOpenEMR allows inconsistent escaping of translation function outputEPSS 0.2%CVE-2026-32119MEDIUMOpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report pageEPSS 0.2%CVE-2026-103938HIGHOpenEMR: CSRF Protection Bypass on IPPF Point-of-Sale Void and Regen OperationsEPSS 0.2%