Exploit discussion active in current signal (6 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax_save CAMOS form that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the ajax_save page in the CAMOS form. Version 8.0.0.3 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33917 OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerabili… https://www.cve.org/CVERecord?id=CVE-2026-33917
Post summary
CVE-2026-33917 highlights a SQL injection flaw in OpenEMR versions older than 8.0.0.3.
BREAKING: Critical SQL injection flaw CVE-2026-33917 in OpenEMR CAMOS ajax_save allows authenticated database takeover, PoCs released, patch now in 8.0.0.3. https://threatcluster.io/cluster/high-severity-sql-injection-vulnerability-in-openemr-cve-202-03af716f
Post summary
A critical SQL injection flaw (CVE-2026-33917) in OpenEMR's CAMOS ajax_save allows authenticated database takeover; PoCs are available, and a patch (8.0.0.3) has been released.
🟠 CVE-2026-33917 - High OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax_save CAMOS... https://www.thehackerwire.com/vulnerability/CVE-2026-33917/ https://t.co/u34yiWb66u
Post summary
The tweet announces a new SQL injection vulnerability (CVE‑2026‑33917) in OpenEMR versions before 8.0.0.3, providing technical details but no PoC, exploit code, patch, or evidence of active exploitation.
🟠 CVE-2026-33917 - High OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax_save CAMOS... https://www.thehackerwire.com/vulnerability/CVE-2026-33917/ https://t.co/b0xgoNoZDp
Post summary
The tweet announces a high‑severity SQL injection flaw (CVE‑2026‑33917) affecting OpenEMR versions before 8.0.0.3.
🟠 CVE-2026-33917 - High OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 contais a SQL injection vulnerability in the ajax_save CAMOS... https://www.thehackerwire.com/vulnerability/CVE-2026-33917/ https://t.co/a0c5d7PbRZ
Post summary
OpenEMR is reported to have a high‑severity SQL injection vulnerability (CVE‑2026‑33917) affecting versions before 8.0.0.3; the disclosure provides basic technical details but no exploit or patch information.
[CVE-2026-33917: HIGH] Beware! OpenEMR versions prior to 8.0.0.3 have a critical SQL injection vulnerability in ajax_save CAMOS form, potentially exploitable by authenticated attackers. Update to 8.0.0.3 for...#cve,CVE-2026-33917,#cybersecurity https://cvefind.com/CVE-2026-33917
Post summary
The post warns of a critical SQL injection in OpenEMR versions prior to 8.0.0.3 and urges users to update to 8.0.0.3.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | open-emr | openemr | - | - | - |