HarborGuard / CVE
Back to search
HIGHCVE-2026-33910Published Modified CNA GitHub_M

CVE-2026-33910: OpenEMR has a SQL Injection Vulnerability in patient selection

OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the patient selection feature. Version 8.0.0.3 contains a patch.

Metrics

CVSS v3.1
7.2
Severity
HIGH
Fixed in
—
Affected Products
1
Affected packages
  • openemr / openemr
    < 8.0.0.3
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References