CVE-2026-25476

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the session expiration check in "library/auth.inc.php" runs only when "skiptimeoutreset" is not present in the request. When "skiptimeoutreset=1" is sent, the entire...

CVE-2026-25476: Insufficient Session Expiration

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the session expiration check in library/auth.inc.php runs only when skiptimeoutreset is not present in the request. When skiptimeoutreset=1 is sent, the entire block th...