Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the prescription listing functionality. Version 8.0.0 fixes the vulnerability.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-25 | 2 | Disclosure2 |
| 2026-02-26 | 1 | Disclosure1 |
CVE-2026-25746 OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability… https://www.cve.org/CVERecord?id=CVE-2026-25746
Post summary
The post announces a SQL injection vulnerability in OpenEMR versions before 8.0.0, referencing the CVE record.
**CVE ID:** CVE-2026-25746 **Type:** SQL Injection **Affected Software:** OpenEMR versions prior to 8.0.0 **Severity:** HIGH (CVSS 8.8) **Attack Vector:** NETWORK **Privileges Required:** LOW **User Interaction:** NONE **Scope:** UNCHANGED **Impact:** Confidentiality, Integrity, and Availability compromised #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #SQLInjection #PrivilegeEscalation https://cvetodo.com/cve/CVE-2026-25746
Post summary
The tweet announces a high‑severity SQL injection vulnerability (CVE‑2026‑25746) affecting OpenEMR versions before 8.0.0, providing technical details but no evidence of exploitation, PoC, or patch.
🟠 CVE-2026-25746 - High OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0 contain a SQL injection vulnerability in prescription that can... https://www.thehackerwire.com/vulnerability/CVE-2026-25746/ https://t.co/EISJ6qoOYM
Post summary
The post announces a high‑severity SQL injection vulnerability in OpenEMR versions before 8.0.0, but does not provide PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open-emr | openemr | - | - | - |