CVE-2026-25131
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, a Broken Access Control vulnerability exists in the OpenEMR order types management system, allowing low-privilege users (such as Receptionist) to add and modify procedure types without proper authorization. This vulnerability is present in the /openemr/interface/orders/types_edit.php endpoint. Version 8.0.0 contains a patch.
Vendor
Product
CWE
Yayın Tarihi
2026-02-25 02:16:22
Güncelleme
2026-02-25 16:56:00
Source Identifier
security-advisories@github.com
KEV Date Added
-