VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Mar 19, 2026· Updated Jun 17, 2026

CVE-2026-32238

CVE-2026-32238

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the backup functionality that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the backup functionality. Version 8.0.0.2 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Openemr/Openemr3 versions
    cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*range: <8.0.0.2
    • (no CPE)range: <8.0.0.2
    • (no CPE)range: < 8.0.0.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.