VulnSocial

CVE-2026-32127Disclosure(open-emr / openemr)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch open-emr openemr systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the ajax graphs library that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the ajax graphs library. This vulnerability is fixed in 8.0.0.1.

open-emr CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openemr

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-03-11); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
open-emr
Products
openemr

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-11: 2Mentions · 2026-03-14: 1Patch / Workaround · 2026-03-11: 1Technical Details · 2026-03-11: 2Technical Details · 2026-03-14: 103-1103-14
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-112
Disclosure1Patch1
2026-03-141
Disclosure1
Full discourse3 posts
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-32127 - High OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the ajax graphs li... https://www.thehackerwire.com/vulnerability/CVE-2026-32127/ https://t.co/P601PrbFyD

    Post summary

    The article announces a high‑severity SQL injection flaw in OpenEMR versions before 8.0.0.1, primarily providing disclosure details without supporting PoC, exploit code, or mitigations.

    0000057
    135 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-32127 OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerabil… https://www.cve.org/CVERecord?id=CVE-2026-32127

    Post summary

    The text announces the discovery of a SQL injection vulnerability (CVE‑2026‑32127) in older OpenEMR releases, but it does not provide exploit code, patch information, or evidence of active exploitation.

    00000123
    56.7K followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-32127: HIGH] OpenEMR, a medical management application, fixed a SQL injection vulnerability in the ajax graphs library that allowed authenticated attackers to exploit it in versions prior to 8.0.0.1.#cve,CVE-2026-32127,#cybersecurity https://cvefind.com/CVE-2026-32127

    Post summary

    OpenEMR has released a patch that addresses a high‑severity SQL Injection vulnerability in its ajax graphs library affecting versions prior to 8.0.0.1.

    0000041
    600 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopen-emropenemr---

Explore more

Back to dashboardopen-emr CVEsopenemr vulnerabilities