169
CVEs
12
Critical
67
High
0
KEV
121
PoC
25
Unpatched C/H
69.2%
Patch Rate
7.7%
Avg EPSS
Severity Breakdown
CRITICAL
12
HIGH
67
MEDIUM
88
LOW
2
Monthly CVE Trend
Affected Products (5)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2013-10044 | An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to extract administrator credentials and subsequently escalate privileges. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.7 | 4.3% | 83 |
PoC
No patch
|
| CVE-2026-24898 | Unauthenticated token disclosure in OpenEMR before 8.0.0. CVSS 10.0. PoC and patch available. | CRITICAL | 10.0 | 0.2% | 70 |
PoC
|
| CVE-2026-24848 | Path traversal in OpenEMR 7.0.4 disposeDocument() allows file access. PoC available. | CRITICAL | 9.9 | 0.2% | 70 |
PoC
No patch
|
| CVE-2026-24849 | Path traversal in OpenEMR electronic health records before fix allows authenticated users to read arbitrary files on the server, potentially exposing patient health data. PoC and patch available. | CRITICAL | 9.9 | 0.0% | 70 |
PoC
|
| CVE-2026-24908 | SQL injection in OpenEMR electronic health records before fix. Authenticated users can execute arbitrary SQL through the medical records system. PoC and patch available. | CRITICAL | 9.9 | 0.0% | 70 |
PoC
|
| CVE-2024-22611 | OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
No patch
|
| CVE-2024-37734 | An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available. | CRITICAL | 9.8 | 0.8% | 69 |
PoC
|
| CVE-2026-25146 | Information disclosure in OpenEMR 5.0.2 to before 8.0.0 exposes sensitive data. PoC and patch available. | CRITICAL | 9.6 | 0.0% | 68 |
PoC
|
| CVE-2015-4453 | interface/globals.php in OpenEMR 2.x, 3.x, and 4.x before 4.2.0 patch 2 allows remote attackers to bypass authentication and obtain sensitive information via an ignoreAuth=1 value to certain scripts,. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 40.9%. | MEDIUM | 5.0 | 40.9% | 66 |
|
| CVE-2018-15152 | Authentication bypass vulnerability in portal/account/register.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker to access (1) portal/add_edit_event_user.php, (2). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available. | CRITICAL | 9.1 | 25.9% | 66 |
PoC
|
| CVE-2017-9380 | OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary code execution within the context of the vulnerable application. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 0.9% | 65 |
PoC
No patch
|
| CVE-2025-67645 | OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. [CVSS 8.8 HIGH] | HIGH | 8.8 | 0.0% | 64 |
PoC
|
| CVE-2026-25131 | OpenEMR versions prior to 8.0.0 contain a broken access control flaw in the order types management system that allows low-privilege users (such as receptionists) to create and modify procedure types without proper authorization. Public exploit code exists for this vulnerability, which has a CVSS score of 8.8 and could enable unauthorized users to manipulate critical medical procedure data. The vulnerability has been patched in version 8.0.0 and later. | HIGH | 8.8 | 0.0% | 64 |
PoC
|
| CVE-2026-23627 | SQL injection in OpenEMR's Immunization module prior to version 8.0.0 enables authenticated users to execute arbitrary database queries through unparameterized patient_id inputs. This allows attackers to exfiltrate protected health information, steal credentials, and potentially achieve remote code execution with complete database compromise. Public exploit code exists for this vulnerability; organizations should upgrade to version 8.0.0 immediately. | HIGH | 8.8 | 0.0% | 64 |
PoC
|
| CVE-2026-25746 | SQL injection in OpenEMR versions before 8.0.0 allows authenticated users to execute arbitrary database queries through the prescription listing feature due to improper input validation. An attacker with valid credentials could exploit this to read, modify, or delete sensitive medical records and patient data. Public exploit code exists for this vulnerability; administrators should upgrade to version 8.0.0 immediately. | HIGH | 8.8 | 0.0% | 64 |
PoC
|