TI-2026-53546 CVE-2026-76614 · GHSA-7994-gr8j-h7xp
OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore
Priority MEDIUM 57
OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function.
Vulnerabilities
4 records
TI-2026-29259 CVE-2026-40509 · GHSA-c2ph-gr8x-j747
OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter
Priority LOW 29
OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer.
TI-2026-29258 CVE-2026-40508 · GHSA-xvw4-236w-442q
OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler
Priority MEDIUM 56
OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administration permissions to upload template files c…
TI-2026-29257 CVE-2026-40507 · GHSA-pqfg-4hrq-q9jm
OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal
Priority MEDIUM 56
OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler.