PT-2026-21976 · Openemr · Openemr

Simecek · Publicado 2026-02-25 · Atualizado 2026-02-27 · CVE-2026-25220

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.0.0

Description OpenEMR is an electronic health records and medical practice management application. Prior to version 8.0.0, the Message Center does not verify administrator privileges when handling the show all=yes URL parameter passed to the getPnotesByUser() function. This allows any authenticated user to view all internal messages by requesting the /messages.php?show all=yes API endpoint. The "Show All" link is visible to non-administrator users, enabling unauthorized access to internal messages.

Recommendations Update to version 8.0.0 or later.

Exploit

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2026-25220

GHSA-PHCP-7QJX-83CM

Produtos afetados

Openemr

Referências · 7

• 🔥 https://github.com/openemr/openemr/security/advisories/GHSA-phcp-7qjx-83cm · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25220.json · Exploit
• https://github.com/openemr/openemr/commit/9f2c44fc88fc051fcf0b6922c373977543e6b2af · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-25220 · Nota de Segurança
• https://twitter.com/CVEnew/status/2027099305627226496 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-25220 · Aviso do Fabricante
• https://t.me/cveNotify/153502 · Publicação no Telegram