Open-emr vulnerabilities
We track 5 vulnerabilities in Open-emr products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.
Latest Open-emr vulnerabilities
- 7.5 High severity
OpenEMR: Improper Restriction of Excessive Authentication Attempts
OpenEMR 7.0.1 contains an authentication brute force vulnerability that allows attackers to bypass rate limiting protections by sending repeated login attempts to the main login endpoint. Attackers can submit POST requests with authUser and clearPass parameter
- 9.8 Critical severity
Openemr: Improper Neutralization of Special Elements used in an SQL Command
OpenEMR 7.0.2 is vulnerable to SQL Injection via \openemr\library\classes\Pharmacy.class.php, \controllers\C_Pharmacy.class.php and \openemr\controller.php.
- 7.5 High severity
Openemr: Files or Directories Accessible to External Parties
A Path Traversal in setup.php in OpenEMR < 7.0.0 allows remote unauthenticated users to read arbitrary files by controlling a connection to an attacker-controlled MySQL server.
- 8.8 High severity
Openemr: Improper Limitation of a Pathname to a Restricted Directory
A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR < 7.0.0 allows remote authenticated users to execute code via the formname parameter.
- 8.1 High severity
Openemr: Authorization Bypass Through User-Controlled Key
An Insecure Direct Object Reference (IDOR) vulnerability in OpenEMR 6.0.0 allows any authenticated attacker to access and modify unauthorized areas via a crafted POST request to /modules/zend_modules/public/Installer/register.