OpenEMR is a free and open source electronic health records and medical practice management application.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Feb 25, 2026 · NIST NVD

   Detected

   OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exam form module allows any authenticated user to be redirected to an arbitrary external URL. This can be exploited for phishing attacks against healthcare providers using OpenEMR. Version 8.0.0 fixes the issue.

2. Jun 17, 2026 · NIST NVD

   Updated

   OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exam form module allows any authenticated user to be redirected to an arbitrary external URL. This can be exploited for phishing attacks against healthcare providers using OpenEMR. Version 8.0.0 fixes the issue.

Affected

• cpe open-emr/openemrversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-24847

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-24847

  OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0, the Eye Exam form module allows any authenticated user to be redirected to an arbitrary external URL. This can be exploited for phishing attacks agains

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com