Sploitus

CVE-2026-33910

2 known exploits for CVE-2026-33910

OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the patient selection feature. Version 8.0.0.3 contains a patch.

Affected products
Openemr
Open-emr Openemr
< 8.0.0.3
Fix
Available
CVSS 3.1
8.8 HIGH
EPSS
0.4% (36th percentile)
Weakness
CWE-89
NVD status
Analyzed
Published
2026-03-25
CVE-2026-33910 at NVD
Authoritative description, scoring and affected products

2 known exploits for CVE-2026-33910

Proof-of-concept code and exploit modules indexed by Sploitus