CVE-2025-67645 OpenEMR Vulnerable to Broken Access Control in Profile Edit Endpoint

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 7.0.4 have a broken access control in the Profile Edit endpoint. An authenticated normal user can modify the request parameters pubpid / pid to reference another user’s recor...

CVE-2026-24770

creationtimestamp| type| source ---|---|--- 2026-01-27 23:02:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdguitgkzk23 2026-01-27 23:02:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgujpao542o 2026-07-09 03:00:05+00:00| seen|...

CVE-2026-24688

creationtimestamp| type| source ---|---|--- 2026-01-27 21:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgq5arbsl2m 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/89977 2026-07-14 00:00:37+00:00| seen| https://t.me/GithubRedTeam/89977 2026-07-15 00:00:18+00:00|...

CVE-2026-24134

creationtimestamp| type| source ---|---|--- 2026-01-27 21:40:07+00:00| published-proof-of-concept| https://github.com/withstudiocms/studiocms/security/advisories/GHSA-8cw6-53m5-4932 2026-01-28 02:04:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh6ousoox2c...

CVE-2025-15468

creationtimestamp| type| source ---|---|--- 2026-01-27 21:02:36+00:00| seen| https://bsky.app/profile/teenigma.bsky.social/post/3mdgnspi53s2b 2026-01-28 02:01:23+00:00| seen| https://bsky.app/profile/slackers.it/post/3mdh6iyvcgd2r 2026-01-28 06:31:10+00:00| seen|...

CVE-2020-36977

creationtimestamp| type| source ---|---|--- 2026-01-27 20:57:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgnjbt4ug2i...

CVE-2026-24842

creationtimestamp| type| source ---|---|--- 2026-01-27 20:50:05+00:00| published-proof-of-concept| https://github.com/isaacs/node-tar/security/advisories/GHSA-34x7-hfp2-rc4v 2026-01-28 01:30:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdh4qvlwf72t 2026-01-28 13:02:50+00:00|...

CVE-2020-36980

creationtimestamp| type| source ---|---|--- 2026-01-27 20:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgmogfqnq26...

CVE-2020-36981

creationtimestamp| type| source ---|---|--- 2026-01-27 20:37:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgmfhxu2b2j...

CVE-2020-36982

creationtimestamp| type| source ---|---|--- 2026-01-27 20:15:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgl5vo6x42i...

CVE-2026-0705

creationtimestamp| type| source ---|---|--- 2026-01-27 20:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgktidct62j...

CVE-2026-23830

creationtimestamp| type| source ---|---|--- 2026-01-27 19:35:18+00:00| published-proof-of-concept| https://github.com/nyariv/SandboxJS/security/advisories/GHSA-wxhw-j4hc-fmq6 2026-01-27 23:43:08+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3mdgwro56ha2c 2026-01-28 00:46:52+00:00|...

CVE-2026-24882

creationtimestamp| type| source ---|---|--- 2026-01-27 19:21:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/127 2026-01-27 19:30:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdgiotrfi424 2026-01-27 20:28:00+00:00| seen|...

CVE-2026-1479

creationtimestamp| type| source ---|---|--- 2026-01-27 19:20:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgi3nh3u72r...

CVE-2026-1474

creationtimestamp| type| source ---|---|--- 2026-01-27 19:16:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdghuozbou2n...

CVE-2026-1478

creationtimestamp| type| source ---|---|--- 2026-01-27 19:14:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdghrjq4un2c...

CVE-2025-69419

creationtimestamp| type| source ---|---|--- 2026-01-27 17:09:42+00:00| seen| https://bsky.app/profile/ytroncal.bsky.social/post/3mdgas7ldks2x 2026-01-27 21:02:56+00:00| seen| https://bsky.app/profile/teenigma.bsky.social/post/3mdgntcoahk2b 2026-01-28 02:01:25+00:00| seen|...

CVE-2025-68670

creationtimestamp| type| source ---|---|--- 2026-01-27 16:49:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7ohcsix27 2026-02-05 22:37:08+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3me5hbxnpzc2g 2026-02-08 14:43:32+00:00| seen|...

CVE-2026-24874

creationtimestamp| type| source ---|---|--- 2026-01-27 16:45:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mdg7gi7jrv2g 2026-01-27 19:27:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdgii45lbs2c...

CVE-2026-22796

creationtimestamp| type| source ---|---|--- 2026-01-27 16:31:45+00:00| seen| https://seclists.org/oss-sec/2026/q1/123 2026-01-27 18:12:29+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdgecjkklr2l 2026-01-27 21:03:17+00:00| seen|...