PT-2026-28155 · Openemr · Openemr

CVE-2026-34051

·

Publicado

2026-03-25

·

Atualizado

2026-03-26

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.0.0.3
Description OpenEMR is an electronic health records and medical practice management application. Improper access control on the Import/Export functionality in versions prior to 8.0.0.3 allows unauthorized users to perform import and export actions through direct request manipulation, bypassing UI restrictions. This can result in unauthorized data access, bulk data extraction, and manipulation of system data.
Recommendations Update to version 8.0.0.3 or later.

Exploit

Correção

Improper Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-285CWE-425

Identificadores relacionados

CVE-2026-34051
GHSA-54M8-WPG9-9665

Produtos afetados

Openemr