Priority HIGH 76
OpenEMR is a free and open source electronic health records and medical practice management application.
Vulnerabilities
154 records
Priority LOW 24
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 24
OpenEMR is a free and open source electronic health records and medical practice management application.
TI-2026-85646 CVE-2026-103019
Open redirect in OpenEMR OIDC end session endpoint
Priority LOW 20
OpenEMR is a free and open source electronic health records and medical practice management application.
TI-2026-85651 CVE-2026-104134
OpenEMR person-search AJAX leaks patient demographics to low-privilege users
Priority LOW 29
OpenEMR is a free and open source electronic health records and medical practice management application.
TI-2026-85649 CVE-2026-103939
OpenEMR Weno module lets any authenticated user empty the pharmacy directory
Priority LOW 25
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 29
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority HIGH 70
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 31
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 35
OpenEMR is a free and open source electronic health records and medical practice management application.
TI-2026-85636 CVE-2026-104135
Missing authorization in OpenEMR payment patient search exposes patient data
Priority LOW 29
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 31
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 30
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 31
OpenEMR is a free and open source electronic health records and medical practice management application.
TI-2026-85639 CVE-2026-104139
Missing authorization in OpenEMR lets users download other patients' records
Priority LOW 29
OpenEMR is a free and open source electronic health records and medical practice management application.
Priority LOW 32
OpenEMR is a free and open source electronic health records and medical practice management application.
TI-2026-82377 CVE-2026-49142 · GHSA-4x43-68v3-4x7c
SQL injection in OpenEMR Syndromic Surveillance module
Priority HIGH 73
OpenEMR before 8.5.0 contains an authenticated SQL injection vulnerability in the Syndromic Surveillance module that allows users with Clinician-level privileges to read and modify arbitrary database contents by submitti…
TI-2026-53546 CVE-2026-76614 · GHSA-7994-gr8j-h7xp
OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore
Priority MEDIUM 57
OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function.
TI-2026-29259 CVE-2026-40509 · GHSA-c2ph-gr8x-j747
OpenEMR < 8.3.0 CSRF via DICOM Viewer web_path Parameter
Priority LOW 29
OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer.
TI-2026-29258 CVE-2026-40508 · GHSA-xvw4-236w-442q
OpenEMR < 8.3.0 Stored XSS via Patient Portal Template Import Handler
Priority MEDIUM 56
OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that allows authenticated attackers with Forms Administration permissions to upload template files c…
TI-2026-29257 CVE-2026-40507 · GHSA-pqfg-4hrq-q9jm
OpenEMR < 8.3.0 Reflected XSS via templateHtml Parameter in Patient Portal
Priority MEDIUM 56
OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler.
TI-2026-29256 CVE-2026-40506
OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php
Priority MEDIUM 64
OpenEMR before 8.2.0 contains a path traversal vulnerability in the standard_tables_manage.php interface where the db GET parameter is passed without validation to temp_dir_cleanup(), which joins the value to the PHP tem…
TI-2026-47766 CVE-2026-67612 · GHSA-rv29-9mq6-7j5q
OpenEMR 8.2.0 Stored XSS via import_template.php Template Management
Priority MEDIUM 55
OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious paylo…
TI-2026-47765 CVE-2026-67611 · GHSA-g6r6-jr7g-hg95
OpenEMR 8.2.0 OAuth2 Password Grant Authentication Bypass via SMART Configuration
Priority HIGH 72
OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by exploiting the exposed OAuth2 password grant flow through an…
TI-2026-47764 CVE-2026-67610 · GHSA-7h45-2j8g-37rm
OpenEMR 8.2.0 OAuth2 Dynamic Client Registration Unauthorized FHIR Access
Priority HIGH 72
OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackers to register a malicious client with system-level FHIR scope…