CVE-2026-25746
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the prescription listing functionality. Version 8.0.0 fixes the vulnerability.
- Affected products
- Openemr
- Open-emr Openemr
- < 8.0.0
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 3.1% (87th percentile)
- Weakness
- CWE-89
- NVD status
- Analyzed
- Published
- 2026-02-25
CVE-2026-25746 at NVD
2 known exploits for CVE-2026-25746
Proof-of-concept code and exploit modules indexed by Sploitus