What is the CVSS score of CVE-2026-24848?

CVE-2026-24848 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of PHP are affected by CVE-2026-24848?

OpenEMR instances running version 7.0.4 or earlier contain a critical vulnerability allowing authenticated users to write arbitrary files to the server, potentially enabling complete system…

Is there a public PoC exploit available for CVE-2026-24848?

Yes, a public proof-of-concept exploit is available for CVE-2026-24848. Prioritise patching immediately. EPSS: 0.2%.

PHP CVE-2026-24848

CRITICAL

Path Traversal (CWE-22)

2026-03-03 security-advisories@github.com

PHP RCE Openemr

9.9

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:05 vuln.today

PoC Detected

Mar 04, 2026 - 21:58 vuln.today

Public exploit code

CVE Published

Mar 03, 2026 - 22:16 nvd

CRITICAL 9.9

DescriptionNVD

OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDocument() method in EtherFaxActions.php allows authenticated users to write arbitrary content to arbitrary locations on the server filesystem. This vulnerability can be exploited to achieve Remote Code Execution (RCE) by uploading malicious PHP web shells.

AnalysisAI

Path traversal in OpenEMR 7.0.4 disposeDocument() allows file access. PoC available.

RemediationAI

Within 24 hours: Inventory all OpenEMR deployments and identify those running version 7.0.4 or earlier; restrict access to EtherFax functionality to essential personnel only. Within 7 days: Implement network segmentation to limit lateral movement from compromised OpenEMR instances; enable enhanced logging and monitoring for file write operations. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

CVE-2026-24848 vulnerability details – vuln.today

Back

PHP CVE-2026-24848

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

RemediationAI

Full analysis requires sign-in

Share

External POC / Exploit Code