Lucene search
+L

8 matches found

NVD
NVD
•added 2026/03/11 9:16 p.m.•17 views

CVE-2026-32126

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route causes the admin/super ACL check to be enforced only for controllers that already have their own internal authorizati...

8.1CVSS0.00498EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/03/11 8:52 p.m.•47 views

CVE-2026-32126 OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route causes the admin/super ACL check to be enforced only for controllers that already have their own internal authorizati...

7.1CVSS0.00498EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2026/03/11 8:52 p.m.•10 views

CVE-2026-32126 OpenEMR: Inverted ACL Condition in CDR ControllerRouter Allows Any Authenticated User to Modify/Delete Clinical Rules and Plans

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route causes the admin/super ACL check to be enforced only for controllers that already have their own internal authorizati...

7.1CVSS5.9AI score0.00498EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/11 8:52 p.m.•21 views

EUVD-2026-11399

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route causes the admin/super ACL check to be enforced only for controllers that already have their own internal authorizati...

7.1CVSS5.8AI score0.00498EPSS
SaveExploits1References1
CVE
CVE
•added 2026/03/11 8:52 p.m.•48 views

CVE-2026-32126

OpenEMR prior to version 8.0.0.1 contains an inverted boolean condition in ControllerRouter::route() that enforces the admin/super ACL check only for controllers with their own internal authorization (e.g., review, log). As a result, all other CDR controllers (alerts, ajax, edit, add, detail, bro...

8.1CVSS5.9AI score0.00498EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2026/03/11 8:52 p.m.•15 views

CVE-2026-32126

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route causes the admin/super ACL check to be enforced only for controllers that already have their own internal authorizati...

7.1CVSS5.8AI score0.00498EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2026/03/11 12:00 a.m.•26 views

OpenEMR 安全漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.1 contained security...

8.1CVSS5.8AI score0.00498EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/11 12:00 a.m.•38 views

PT-2026-24847

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, an inverted boolean condition in ControllerRouter::route causes the admin/super ACL check to be enforced only for controllers that already have their own internal authorizati...

7.1CVSS5.8AI score0.00498EPSS
SaveExploits1References3
Rows per page
Query Builder