SQL Injection Vulnerability in OpenEMR Healthcare Management Software

CVE-2026-33910

What is CVE-2026-33910?

OpenEMR, a widely-used open source electronic health records and medical practice management application, is susceptible to a SQL injection vulnerability within its patient selection feature. This weakness arises from inadequate input validation, allowing authenticated attackers to manipulate database queries. If exploited, it could lead to unauthorized data access or alterations. Users are strongly encouraged to upgrade to version 8.0.0.3 or later, which includes critical patches addressing this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References