PHP CVE-2026-24898
CRITICALCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0, an unauthenticated token disclosure vulnerability in the MedEx callback endpoint allows any unauthenticated visitor to obtain the practice's MedEx API tokens, leading to complete third-party service compromise, PHI exfiltration, unauthorized actions on the MedEx platform, and HIPAA violations. The vulnerability exists because the endpoint bypasses authentication ($ignoreAuth = true) and performs a MedEx login whenever $_POST['callback_key'] is provided, returning the full JSON response including sensitive API tokens. This vulnerability is fixed in 8.0.0.
AnalysisAI
Unauthenticated token disclosure in OpenEMR before 8.0.0. CVSS 10.0. …
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all OpenEMR instances in your environment and assess network exposure; isolate affected systems if patching cannot be completed immediately. Within 7 days: Apply the available vendor patch to all OpenEMR deployments and verify successful remediation. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today