CVE-2026-25127
OpenEMR has Broken Access Control on Care Coordination Module
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the server does not properly validate user permission. Unauthorized users can view the information of authorized users. Version 8.0.0 fixes the issue.
| CWE | CWE-863 |
| Vendor | openemr |
| Product | openemr |
| Published | Feb 25, 2026 |
| Last Updated | Feb 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for openemr openemr
Be the first to know when new unknown vulnerabilities affecting openemr openemr are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
openemr / openemr
< 8.0.0