Open Emr CVEs — known vulnerabilities

Openemr HIGH 8.7

CVE-2026-46518

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.1, a stored cross-sit…

Fix: 8.0.0.1+

Fix from $1,950 2026-06-10

Openemr HIGH 7.5

CVE-2023-54347

OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated logi…

No fix yet

Fix from $1,950 2026-05-05

Openemr HIGH 8.1

CVE-2026-34053

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, missing authorizat…

Fix: 8.0.0.3+

Fix from $1,950 2026-03-26

Openemr MEDIUM 6.5

CVE-2026-34056

OpenEMR is a free and open source electronic health records and medical practice management application. A Broken Access Control vulnerability in Ope…

Fix: after 8.0.0.3

Fix from $1,600 2026-03-26

Openemr MEDIUM 6.3

CVE-2026-34055

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the legacy patient…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-26

Openemr MEDIUM 6.1

CVE-2026-33933

OpenEMR is a free and open source electronic health records and medical practice management application. Starting in version 7.0.2.1 and prior to ver…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-26

Openemr MEDIUM 5.4

CVE-2026-34051

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper a…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-26

Openemr HIGH 8.8

CVE-2026-33917

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL inje…

Fix: 8.0.0.3+

Fix from $1,950 2026-03-26

Openemr HIGH 8.8

CVE-2026-33918

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the billing file-d…

Fix: 8.0.0.3+

Fix from $1,950 2026-03-26

Openemr HIGH 7.2

CVE-2026-33914

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the PostCalendar m…

Fix: 8.0.0.3+

Fix from $1,950 2026-03-26

Openemr MEDIUM 6.5

CVE-2026-33931

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecure Direct…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-26

Openemr MEDIUM 5.4

CVE-2026-33915

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, five insurance com…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-26

Openemr MEDIUM 5.4

CVE-2026-33932

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a stored cross-sit…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-26

Openemr HIGH 8.8

CVE-2026-33910

OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain…

Fix: 8.0.0.3+

Fix from $1,950 2026-03-25

Openemr MEDIUM 5.9

CVE-2026-33909

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, several variables …

Fix: 8.0.0.3+

Fix from $1,600 2026-03-25

Openemr MEDIUM 5.4

CVE-2026-33911

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, the POST parameter…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-25

Openemr MEDIUM 5.4

CVE-2026-33912

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenticated a…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-25

Openemr HIGH 8.8

CVE-2026-29187

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, a Blind SQL Inject…

Fix: 8.0.0.3+

Fix from $1,950 2026-03-25

Openemr MEDIUM 6.3

CVE-2026-32120

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an Insecure Direct…

Fix: 8.0.0.3+

Fix from $1,600 2026-03-25

Openemr MEDIUM 5.4

CVE-2026-33348

OpenEMR is a free and open source electronic health records and medical practice management application. Users with the `Notes - my encounters` role …

Fix: 8.0.0.3+

Fix from $1,600 2026-03-25

Openemr HIGH 8.7

CVE-2026-33346

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, a stored cross-site script…

Fix: 8.0.0.2+

Fix from $1,950 2026-03-19

Openemr HIGH 7.6

CVE-2026-33321

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the `Notes - my…

Fix: 8.0.0.2+

Fix from $1,950 2026-03-19

Openemr HIGH 8.1

CVE-2026-33301

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the `Notes - m…

Fix: 8.0.0.2+

Fix from $1,950 2026-03-19

Openemr HIGH 8.1

CVE-2026-33302

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the module ACL function `A…

Fix: 8.0.0.2+

Fix from $1,950 2026-03-19

Openemr MEDIUM 6.5

CVE-2026-33304

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, an authorization bypass in…

Fix: 8.0.0.2+

Fix from $1,600 2026-03-19

Openemr MEDIUM 5.4

CVE-2026-33299

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, users with the `Notes - my…

Fix: 8.0.0.2+

Fix from $1,600 2026-03-19

Openemr MEDIUM 5.4

CVE-2026-33303

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 are vulnerable to …

Fix: 8.0.0.2+

Fix from $1,600 2026-03-19

Openemr MEDIUM 5.4

CVE-2026-33305

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, an authorization bypass in…

Fix: 8.0.0.2+

Fix from $1,600 2026-03-19

Openemr CRITICAL 9.1

CVE-2026-32238

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command …

Fix: 8.0.0.2+

Fix from $2,300 2026-03-19

Openemr MEDIUM 6.5

CVE-2026-25744

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.2, the encounter vitals API a…

Fix: 8.0.0.2+

Fix from $1,600 2026-03-19

Browse CVEs