{"schema_version":1,"title":"OpenEMR vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 57 vulnerabilities in OpenEMR: 42 in the last 7 days and 57 in the last 90 days, 5 of them critical and 0 exploited in the wild. The most recent, CVE-2026-124490, was published on 8 November 2026. 57 vulnerabilities in the last four weeks, up from none in the four before. 5 critical against 0.","url":"https://junglewise.ai/threats/technologies/openemr-openemr","json_url":"https://junglewise.ai/threats/technologies/openemr-openemr.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/openemr-openemr","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":29,"all_time":57,"critical":5,"exploited":0,"last_7_days":42,"last_30_days":57,"last_90_days":57,"last_365_days":57},"latest":[{"cve":"CVE-2026-124490","cvss":9.1,"slug":"cve-2026-124490-openemr-before-8-3-0-contains-a-path-traversal-vulnerability-in","title":"OpenEMR path traversal in oe-module-faxsms disposeDocument","severity":"critical","exploited":false,"published_at":"2026-11-08T14:18:18.667+00:00","url":"https://junglewise.ai/threats/cve-2026-124490-openemr-before-8-3-0-contains-a-path-traversal-vulnerability-in"},{"cve":"CVE-2026-124489","cvss":7.1,"slug":"cve-2026-124489-openemr-before-8-3-0-contains-a-broken-access-control","title":"OpenEMR broken access control in portal payment processing","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:18.52+00:00","url":"https://junglewise.ai/threats/cve-2026-124489-openemr-before-8-3-0-contains-a-broken-access-control"},{"cve":"CVE-2026-124488","cvss":8.1,"slug":"cve-2026-124488-openemr-before-8-3-0-contains-an-authorization-bypass","title":"OpenEMR authorization bypass in encounter form loaders","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:18.37+00:00","url":"https://junglewise.ai/threats/cve-2026-124488-openemr-before-8-3-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-124487","cvss":6.5,"slug":"cve-2026-124487-openemr-before-8-4-0-contains-an-improper-authorization","title":"OpenEMR improper authorization in FHIR DocumentReference $docref","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:18.223+00:00","url":"https://junglewise.ai/threats/cve-2026-124487-openemr-before-8-4-0-contains-an-improper-authorization"},{"cve":"CVE-2026-124486","cvss":8.8,"slug":"cve-2026-124486-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in classic document controller","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:18.073+00:00","url":"https://junglewise.ai/threats/cve-2026-124486-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124485","cvss":6.5,"slug":"cve-2026-124485-openemr-before-8-3-0-contains-an-authorization-bypass","title":"OpenEMR authorization bypass in patient portal onsitedocuments API","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:17.927+00:00","url":"https://junglewise.ai/threats/cve-2026-124485-openemr-before-8-3-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-124484","cvss":8.8,"slug":"cve-2026-124484-openemr-before-8-4-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in portal onsite-document APIs","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:17.773+00:00","url":"https://junglewise.ai/threats/cve-2026-124484-openemr-before-8-4-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124483","cvss":8.3,"slug":"cve-2026-124483-openemr-before-8-4-0-contains-an-incorrect-authorization","title":"OpenEMR prescription REST API authorization bypass","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:17.617+00:00","url":"https://junglewise.ai/threats/cve-2026-124483-openemr-before-8-4-0-contains-an-incorrect-authorization"},{"cve":"CVE-2026-124482","cvss":6.5,"slug":"cve-2026-124482-openemr-before-8-4-0-contains-an-authorization-bypass-allowing","title":"OpenEMR authorization bypass in SMART patient-launch","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:17.457+00:00","url":"https://junglewise.ai/threats/cve-2026-124482-openemr-before-8-4-0-contains-an-authorization-bypass-allowing"},{"cve":"CVE-2026-124481","cvss":6.5,"slug":"cve-2026-124481-openemr-before-8-4-0-contains-an-improper-authorization","title":"OpenEMR improper authorization in Rainforest patient portal payments","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:17.3+00:00","url":"https://junglewise.ai/threats/cve-2026-124481-openemr-before-8-4-0-contains-an-improper-authorization"},{"cve":"CVE-2026-124480","cvss":8.8,"slug":"cve-2026-124480-openemr-before-8-4-0-contains-an-authorization-bypass","title":"OpenEMR authorization bypass in FHIR QuestionnaireResponse","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:17.147+00:00","url":"https://junglewise.ai/threats/cve-2026-124480-openemr-before-8-4-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-124478","cvss":6.5,"slug":"cve-2026-124478-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in addRecall","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:16.843+00:00","url":"https://junglewise.ai/threats/cve-2026-124478-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124477","cvss":8.8,"slug":"cve-2026-124477-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in patient recall deletion","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:16.653+00:00","url":"https://junglewise.ai/threats/cve-2026-124477-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124476","cvss":6.5,"slug":"cve-2026-124476-openemr-before-8-3-0-contains-an-insecure-direct-object","title":"OpenEMR insecure direct object reference in payment portal","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:16.463+00:00","url":"https://junglewise.ai/threats/cve-2026-124476-openemr-before-8-3-0-contains-an-insecure-direct-object"},{"cve":"CVE-2026-124475","cvss":7.1,"slug":"cve-2026-124475-openemr-before-8-3-0-contains-an-insecure-direct-object","title":"OpenEMR insecure direct object reference in patient portal settings","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:16.32+00:00","url":"https://junglewise.ai/threats/cve-2026-124475-openemr-before-8-3-0-contains-an-insecure-direct-object"},{"cve":"CVE-2026-124473","cvss":7.1,"slug":"cve-2026-124473-openemr-before-8-3-0-contains-a-broken-object-level","title":"OpenEMR broken object-level authorization in SOAP note update API","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:16.017+00:00","url":"https://junglewise.ai/threats/cve-2026-124473-openemr-before-8-3-0-contains-a-broken-object-level"},{"cve":"CVE-2026-124472","cvss":8.1,"slug":"cve-2026-124472-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in billing note interface","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:15.61+00:00","url":"https://junglewise.ai/threats/cve-2026-124472-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124471","cvss":8.1,"slug":"cve-2026-124471-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR authorization bypass in billing interface","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:15.447+00:00","url":"https://junglewise.ai/threats/cve-2026-124471-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124470","cvss":6.5,"slug":"cve-2026-124470-openemr-before-8-3-0-contains-a-broken-object-level","title":"OpenEMR broken object level authorization in patient portal report","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:15.287+00:00","url":"https://junglewise.ai/threats/cve-2026-124470-openemr-before-8-3-0-contains-a-broken-object-level"},{"cve":"CVE-2026-124469","cvss":9.9,"slug":"cve-2026-124469-openemr-before-8-3-0-contains-an-sql-injection-vulnerability-in","title":"OpenEMR SQL injection in Fee Sheet drug-inventory lookup","severity":"critical","exploited":false,"published_at":"2026-11-08T14:18:15.13+00:00","url":"https://junglewise.ai/threats/cve-2026-124469-openemr-before-8-3-0-contains-an-sql-injection-vulnerability-in"},{"cve":"CVE-2026-124468","cvss":7.1,"slug":"cve-2026-124468-openemr-before-8-3-0-contains-an-sql-injection-vulnerability-in","title":"OpenEMR SQL injection in Standard REST API patient search","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:14.977+00:00","url":"https://junglewise.ai/threats/cve-2026-124468-openemr-before-8-3-0-contains-an-sql-injection-vulnerability-in"},{"cve":"CVE-2026-124467","cvss":8.8,"slug":"cve-2026-124467-openemr-before-8-4-0-contains-a-local-file-inclusion-in-the","title":"OpenEMR local file inclusion and arbitrary code execution via ESign and fax modules","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:14.823+00:00","url":"https://junglewise.ai/threats/cve-2026-124467-openemr-before-8-4-0-contains-a-local-file-inclusion-in-the"},{"cve":"CVE-2026-124466","cvss":7.2,"slug":"cve-2026-124466-openemr-before-8-4-0-contains-a-server-side-request-forgery","title":"OpenEMR server-side request forgery in OAuth2 jwks_uri","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:14.65+00:00","url":"https://junglewise.ai/threats/cve-2026-124466-openemr-before-8-4-0-contains-a-server-side-request-forgery"},{"cve":"CVE-2026-124464","cvss":6.5,"slug":"cve-2026-124464-openemr-before-8-4-0-contains-an-authorization-bypass","title":"OpenEMR FHIR Patient Compartment bypass in QuestionnaireResponse","severity":"medium","exploited":false,"published_at":"2026-11-08T14:18:14.32+00:00","url":"https://junglewise.ai/threats/cve-2026-124464-openemr-before-8-4-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-124463","cvss":8.7,"slug":"cve-2026-124463-openemr-before-8-3-0-contains-a-stored-cross-site-scripting","title":"OpenEMR stored cross-site scripting in CAMOS Rx print","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:14.167+00:00","url":"https://junglewise.ai/threats/cve-2026-124463-openemr-before-8-3-0-contains-a-stored-cross-site-scripting"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-02","critical":5,"exploited":0,"vulnerabilities":56},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"OpenEMR","slug":"openemr-openemr","vendor":{"hub":true,"name":"OpenEMR","slug":"openemr","url":"https://junglewise.ai/threats/vendors/openemr"},"aliases":[],"category":"healthcare-information-system","description":"Open source electronic health record management system.","url":"https://junglewise.ai/threats/technologies/openemr-openemr"},"most_severe":[{"cve":"CVE-2026-124469","cvss":9.9,"slug":"cve-2026-124469-openemr-before-8-3-0-contains-an-sql-injection-vulnerability-in","title":"OpenEMR SQL injection in Fee Sheet drug-inventory lookup","severity":"critical","exploited":false,"published_at":"2026-11-08T14:18:15.13+00:00","url":"https://junglewise.ai/threats/cve-2026-124469-openemr-before-8-3-0-contains-an-sql-injection-vulnerability-in"},{"cve":"CVE-2026-124450","cvss":9.9,"slug":"cve-2026-124450-openemr-before-8-3-0-contains-a-broken-access-control-and-path","title":"OpenEMR fax/sms module broken access control and path traversal","severity":"critical","exploited":false,"published_at":"2026-11-08T14:18:12.26+00:00","url":"https://junglewise.ai/threats/cve-2026-124450-openemr-before-8-3-0-contains-a-broken-access-control-and-path"},{"cve":"CVE-2026-124445","cvss":9.8,"slug":"cve-2026-124445-openemr-from-7-0-1-before-8-4-0-contains-a-flaw-in-src-common","title":"OpenEMR OneTimeAuth token replay and PIN brute force","severity":"critical","exploited":false,"published_at":"2026-11-08T14:18:11.487+00:00","url":"https://junglewise.ai/threats/cve-2026-124445-openemr-from-7-0-1-before-8-4-0-contains-a-flaw-in-src-common"},{"cve":"CVE-2026-102940","cvss":9.6,"slug":"cve-2026-102940-openemr-is-a-free-and-open-source-electronic-health-records-and","title":"OpenEMR authorization bypass in document reassignment","severity":"critical","exploited":false,"published_at":"2026-11-05T20:17:37.543+00:00","url":"https://junglewise.ai/threats/cve-2026-102940-openemr-is-a-free-and-open-source-electronic-health-records-and"},{"cve":"CVE-2026-124490","cvss":9.1,"slug":"cve-2026-124490-openemr-before-8-3-0-contains-a-path-traversal-vulnerability-in","title":"OpenEMR path traversal in oe-module-faxsms disposeDocument","severity":"critical","exploited":false,"published_at":"2026-11-08T14:18:18.667+00:00","url":"https://junglewise.ai/threats/cve-2026-124490-openemr-before-8-3-0-contains-a-path-traversal-vulnerability-in"},{"cve":"CVE-2026-124486","cvss":8.8,"slug":"cve-2026-124486-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in classic document controller","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:18.073+00:00","url":"https://junglewise.ai/threats/cve-2026-124486-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124484","cvss":8.8,"slug":"cve-2026-124484-openemr-before-8-4-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in portal onsite-document APIs","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:17.773+00:00","url":"https://junglewise.ai/threats/cve-2026-124484-openemr-before-8-4-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124480","cvss":8.8,"slug":"cve-2026-124480-openemr-before-8-4-0-contains-an-authorization-bypass","title":"OpenEMR authorization bypass in FHIR QuestionnaireResponse","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:17.147+00:00","url":"https://junglewise.ai/threats/cve-2026-124480-openemr-before-8-4-0-contains-an-authorization-bypass"},{"cve":"CVE-2026-124477","cvss":8.8,"slug":"cve-2026-124477-openemr-before-8-3-0-contains-a-missing-authorization","title":"OpenEMR missing authorization in patient recall deletion","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:16.653+00:00","url":"https://junglewise.ai/threats/cve-2026-124477-openemr-before-8-3-0-contains-a-missing-authorization"},{"cve":"CVE-2026-124467","cvss":8.8,"slug":"cve-2026-124467-openemr-before-8-4-0-contains-a-local-file-inclusion-in-the","title":"OpenEMR local file inclusion and arbitrary code execution via ESign and fax modules","severity":"high","exploited":false,"published_at":"2026-11-08T14:18:14.823+00:00","url":"https://junglewise.ai/threats/cve-2026-124467-openemr-before-8-4-0-contains-a-local-file-inclusion-in-the"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}