3 CVEs
CRITICAL
CVSS 10.0
OpenEMR Multiple Critical Vulnerabilities
2026-03-03
CVE-2026-24898
CRITICAL
POC
PATCH
Unauthenticated token disclosure in OpenEMR before 8.0.0. CVSS 10.0. PoC and patch available.
10.0
CVSS
0.2%
EPSS
CVE-2026-24848
CRITICAL
POC
Path traversal in OpenEMR 7.0.4 disposeDocument() allows file access. PoC available.
9.9
CVSS
0.2%
EPSS
CVE-2026-25146
CRITICAL
POC
PATCH
Information disclosure in OpenEMR 5.0.2 to before 8.0.0 exposes sensitive data. PoC and patch available.
9.6
CVSS
0.0%
EPSS