Skip to content

CyberSIXT Search

openemr product

Several products

← All openemr products

No Several products CVE is in the CISA KEV catalogue.

Tracked since 29 Apr · latest article Thu 30 Apr · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds · current: 0; high · not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

No Several products CVE is in the CISA KEV catalogue.

Coverage

3 articles · all timeFull timeline →

Three articles so far, 29 Apr to 30 Apr.

Wed 29 Apr · first reportOpenEMR bugs risk patient data leak and remote code executionSecurityWeek
Wed 29 AprAI audit finds 38 OpenEMR flaws, CVE-2026-24908 leaks PHIDark Reading
Thu 30 AprSMS blaster bust, OpenEMR flaws, 600K Roblox accounts hackedThe Hacker News

See the full timeline

30 AprSMS blaster bust, OpenEMR flaws, 600K Roblox accounts hackedThe Hacker News
29 AprAI audit finds 38 OpenEMR flaws, CVE-2026-24908 leaks PHIDark Reading
29 AprOpenEMR bugs risk patient data leak and remote code executionSecurityWeek

All CVEs in coverage

3

CVE-2026-23627openemr vulnerabilityCVSS7.4High–Not in KEV0.8%EPSS3articles

CVE-2026-24908openemr vulnerabilityCVSS10.0Critical–Not in KEV0.5%EPSS3articles

CVE-2026-24487OpenEMR has FHIR Patient Compartment Bypass in CareTeam ResourceCVSS5.7Medium–Not in KEV0.3%EPSS2articles

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.