CVE-2026-34051 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper access contr…
Medium CVSS: 5.4

CVE-2026-34051

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have an improper access control on the Import/Export functionality, allowing unauthorized users to perform import and export actions through direct request manipulation despite UI restrictions. This can lead to unauthorized data access, bulk data extraction, and manipulation of system data. Version 8.0.0.3 contains a fix.
Vendor
Open-emr
Product
Openemr
CWE
CWE-285
Yayın Tarihi
2026-03-26 00:16:40
Güncelleme
2026-03-26 16:17:42
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-285 Openemr MEDIUM Open-emr 2026

Referanslar

https://github.com/openemr/openemr/commit/81c097f7852fc60d45adf6c13baa86cd0a1b400b https://github.com/openemr/openemr/releases/tag/v8_0_0_3 https://github.com/openemr/openemr/security/advisories/GHSA-54m8-wpg9-9665