OpenEMR Vulnerability in Payment Gateway Management
CVE-2026-25146

9.6CRITICAL

Key Information:

Vendor: Openemr
Status: Openemr
Vendor: CVE Published:; 3 March 2026

What is CVE-2026-25146?

OpenEMR, a widely-used electronic health records management application, has a significant security vulnerability that exposes the gateway_api_key in plaintext to clients between versions 5.0.2 and 8.0.0. This exposure could lead to the unauthorized movement of funds and enable attackers to compromise payment gateway APIs, ultimately jeopardizing user accounts and financial data. The issue has been remediated in version 8.0.0, making it imperative for users to upgrade to safeguard their applications against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch