openemr vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-40506 OpenEMR before 8.2.0 contains a path traversal vulnerability in the standard_tables_manage.php interface where the db GET parameter is passed without validationHigh 7 · Aug 17, 2026
• CVE-2026-67611 OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials to circumvent multi-factor authentication by High 8.6 · Aug 3, 2026
• CVE-2026-67610 OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration endpoint that allows unauthenticated attackersHigh 8.6 · Aug 3, 2026
• CVE-2026-39932 OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenCritical 9.4 · Aug 3, 2026
• CVE-2026-39931 OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or High 8.6 · Aug 3, 2026
• CVE-2026-46518 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.7 · Jun 9, 2026
• CVE-2026-34056 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.7 · Mar 25, 2026
• CVE-2026-34055 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.1 · Mar 25, 2026
• CVE-2026-34053 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.1 · Mar 25, 2026
• CVE-2026-33932 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.6 · Mar 25, 2026
• CVE-2026-33918 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.6 · Mar 25, 2026
• CVE-2026-33917 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.8 · Mar 25, 2026
• CVE-2026-33914 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.2 · Mar 25, 2026
• CVE-2026-33913 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.7 · Mar 25, 2026
• CVE-2026-33910 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.2 · Mar 25, 2026
• CVE-2026-33348 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.7 · Mar 25, 2026
• CVE-2026-29187 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.1 · Mar 25, 2026
• CVE-2026-33346 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.7 · Mar 19, 2026
• CVE-2026-33321 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.2 · Mar 19, 2026
• CVE-2026-33302 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.3 · Mar 19, 2026
• CVE-2026-33301 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.1 · Mar 19, 2026
• CVE-2026-33299 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.5 · Mar 19, 2026
• CVE-2026-32238 OpenEMR is a free and open source electronic health records and medical practice management application.Critical 9.1 · Mar 19, 2026
• CVE-2026-32127 OpenEMR is a free and open source electronic health records and medical practice management application.High 8.8 · Mar 11, 2026
• CVE-2026-32126 OpenEMR is a free and open source electronic health records and medical practice management application.High 7.1 · Mar 11, 2026