cvedb.io
CVE-2026-25127
MEDIUM · CVSS 6.5
EPSS exploitation probability: 0%
Published 2026-02-25T02:16:22.820 · Last modified 2026-06-17T10:24:09.313

Summary

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue.

Affected products

open-emr — openemr

Does this affect you?

Add your gear to cvedb and we'll alert you only when open-emr ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.