CVE-2026-24848

CVE-2026-24848 affects OpenEMR up to version 7.0.4 (and earlier). The vulnerability resides in the disposeDocument() method of EtherFaxActions.php, allowing authenticated users to write arbitrary content to arbitrary locations on the server filesystem. This condition can be exploited to achieve R...

PT-2026-21824

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 7.0.4 Description OpenEMR is an open source electronic health records and medical practice management application. Prior to version 7.0.4, the disposeDocument method in EtherFaxActions.php allows authenticated users t...