CVE-2026-24898 OpenEMR has an Unauthenticated MedEx Token Disclosure

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0, an unauthenticated token disclosure vulnerability in the MedEx callback endpoint allows any unauthenticated visitor to obtain the practice's MedEx API tokens, leading to comple...

OpenEMR 授权问题漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0 contained vulnerabilities...

GHSA-QPPJ-FM5R-HXR3

creationtimestamp| type| source ---|---|--- 2026-03-02 14:02:39+00:00| seen| https://gist.github.com/nagy/90607f86d8a7a0c2a6b37d48a5f75dfb...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: trivy-operator-fips, metrics-server, rancher-webhook-fips, policy-controller, ory-kratos, cerbos, sftpgo, kubevirt-cdi-controller, k6-fips, vault-secrets-webhook, falcoctl, ops-agent, ratify, azurefile-csi-fips, rekor, cloud-provider-aws-fips, tekton-pipelines, kanik...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

EUVD-2025-208129

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to learn affected products, components, and remediation information.

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2025-15567

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

Vivo Health 安全漏洞

Vivo Health is a sports guidance and health management software developed by the Chinese company Vivo. There is a security vulnerability in Vivo Health, which stems from insufficient protection mechanisms, potentially leading to the leakage of certain information...

PT-2026-22309

Name of the Vulnerable Software and Affected Versions Health Module affected versions not specified Description Insufficient protection mechanisms in the Health Module may lead to partial information disclosure. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-15567: Missing Authentication for Critical Function

Insufficient protection mechanisms in the Health Module may lead to partial information disclosure...

CVE-2026-25476

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the session expiration check in library/auth.inc.php runs only when skiptimeoutreset is not present in the request. When skiptimeoutreset=1 is sent, the entire block th...

CVE-2026-24908

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Patient REST API endpoint allows authenticated users with API access to execute arbitrary SQL queries through the sort parameter...

New Dohdoor malware campaign targets education and health care

Cisco Talos discovered an ongoing malicious campaign since at least as early as December 2025 by a threat actor we track as "UAT-10027," delivering a previously undisclosed backdoor dubbed "Dohdoor." Dohdoor utilizes the DNS-over-HTTPS DoH technique for command-and-control C2 communications and h...

CVE-2025-67752

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, OpenEMR's HTTP client wrapper oeHttp/oeHttpRequest disables SSL/TLS certificate verification by default verify: false, making all external HTTPS connections vulnerable ...

CVE-2026-23627

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, an SQL injection vulnerability in the Immunization module allows any authenticated user to execute arbitrary SQL queries, leading to complete database compromise, PHI...