← Database

CVE-2026-25127

MEDIUM CVSS: 6.5 Published: 2026-02-25 Modified: 2026-06-17

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue.

Affected Platforms

Open-Emr Openemr

Weakness Type

CWE-863

References