Known Vulnerabilities for OpenEMR by Open-Emr
Listed below are 10 of the newest known vulnerabilities associated with "OpenEMR" by "Open-Emr".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-76614 json | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST pa... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-67612 json | OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows ... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-67611 json | OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumv... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-67610 json | OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint th... | Not Provided | 2026-08-03 | 2026-08-03 |
| CVE-2026-46518 json | OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0... | Not Provided | 2026-06-10 | 2026-06-10 |
| CVE-2026-40509 json | OpenEMR before 8.3.0 contains a cross-site request forgery vulnerability in the DICOM viewer. The web_path GET parameter in t... | Not Provided | 2026-08-19 | 2026-08-20 |
| CVE-2026-40508 json | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the patient portal template import handler that ... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-40507 json | OpenEMR before 8.3.0 contains a reflected cross-site scripting vulnerability in the patient portal template import handler. T... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-40506 json | OpenEMR before 8.2.0 contains a path traversal vulnerability in the standard_tables_manage.php interface where the db GET par... | Not Provided | 2026-08-17 | 2026-08-18 |
| CVE-2026-39932 json | OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes... | Not Provided | 2026-08-03 | 2026-08-03 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Open-emr | Openemr | 5.0.2.5 | |||
| Application | Open-emr | Openemr | 5.0.2.1 | |||
| Application | Open-emr | Openemr | 5.0.2 | |||
| Application | Open-emr | Openemr | 5.0.1.7 | |||
| Application | Open-emr | Openemr | 5.0.1.6 | |||
| Application | Open-emr | Openemr | 5.0.1.5 | |||
| Application | Open-emr | Openemr | 5.0.1.4 | |||
| Application | Open-emr | Openemr | 5.0.1.3 | |||
| Application | Open-emr | Openemr | 5.0.1.2 | |||
| Application | Open-emr | Openemr | 5.0.1.1 | |||
| Application | Open-emr | Openemr | 5.0.1-6 | |||
| Application | Open-emr | Openemr | 5.0.1 | |||
| Application | Open-emr | Openemr | 5.0.1 | |||
| Application | Open-emr | Openemr | 5.0.0.6 | |||
| Application | Open-emr | Openemr | 5.0.0.5 | |||
| Application | Open-emr | Openemr | 5.0.0 | |||
| Application | Open-emr | Openemr | 5.0.0 | |||
| Application | Open-emr | Openemr | 4.2.2 | |||
| Application | Open-emr | Openemr | 4.2.1 | |||
| Application | Open-emr | Openemr | 4.2.0.3 |