Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25127 OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate… https://www.cve.org/CVERecord?id=CVE-2026-25127
Post summary
The post announces CVE‑2026‑25127 for OpenEMR, noting a validation flaw in versions prior to 8.0.0, but provides no further technical details, exploit code, or mitigation information.
CVE-2026-25127 Unauthorized User Information Disclosure in OpenEMR Prior to Version 8.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25127
Post summary
The text announces a user information disclosure vulnerability in OpenEMR versions before 8.0.0, with no mention of PoC, exploit, patch, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open-emr | openemr | - | - | - |