Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| openemr | CVE-2026-126494 OpenEMR before 8.4.0 contains an improper authorization vulnerability in ScopeRepository::finalizeScopes() that allows read-only SMART/OAuth clients to obtain write scopes because ScopeEntity::containsScope() ignores registered permissions. Attackers with a client registered for… |
7,1 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| zipline | CVE-2026-126936 Zipline before 4.7.0 contains a race condition vulnerability that allows users to bypass invitation usage limits, upload storage quotas, and shortened-URL quotas through concurrent requests. Attackers can send overlapping registration, upload, or URL creation requests that pass checks against… |
5,9 | 0,21 % | Brak wpisu w KEV nie wyklucza ataków | |
| zipline | CVE-2026-126937 Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated attackers to create multiple SUPERADMIN accounts by racing concurrent requests before the firstSetup flag is reset. Attackers can send simultaneous requests with spoofed… |
9,2 | 0,32 % | Brak wpisu w KEV nie wyklucza ataków | |
| zipline | CVE-2026-126938 Zipline before 4.6.4 contains a resource allocation vulnerability that allows authenticated users to bypass chunked-upload size and quota checks by forging Content-Range offsets and totals. Attackers can send tiny chunks to the partial upload endpoint with large declared offsets, causing the… |
7,1 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| zipline | CVE-2026-126939 Zipline before 4.6.4 contains an information disclosure vulnerability in GET /api/server/folder/:id that allows unauthenticated attackers to list files in non-public upload-only folders. Attackers who know the folder UUID can supply the page query parameter to bypass the metadata-only early return… |
5,3 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| zipline | CVE-2026-126940 Zipline before 4.6.4 contains a rate limit bypass vulnerability that allows remote attackers to evade request limits by varying query strings or supplying the x-zipline-p-filename header. Attackers can append differing query parameters to login and file or short-link password verification… |
6,5 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126488 OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal OnsiteDocument.Query endpoint, where mass-assigned _BitwiseAnd criteria parameters are placed unquoted into SQL with only quote-character escaping. Authenticated portal patients can inject SQL outside their… |
8,3 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126489 OpenEMR before 8.5.0 contains a second-order SQL injection vulnerability in the IPPF contraceptive issue feature because issue_ippf_con_save concatenates layout_options field_id values into a REPLACE INTO query as column names. Authenticated administrators can add a malicious field_id via… |
8,6 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126490 OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru("groups") and discloses the web server's Unix group memberships. Authenticated attackers with fax module access can supply a nonexistent jid value to reveal groups such as adm or shadow, aiding… |
4,3 | 0,26 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126491 OpenEMR before 8.5.0 contains a stored SQL injection vulnerability in getByPatientDemographics() where layout_options field_id values are concatenated into the patient search WHERE clause. Attackers with Layout Editor access can plant a malicious field_id, allowing any authenticated low-privilege… |
7,6 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126492 OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows low-privileged authenticated users to store malicious SQL via library/ajax/addlistitem.php. Attackers can persist a SQL fragment in the recent_patient_columns option_id value, which dynamic_finder.php concatenates… |
8,8 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126493 OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows low-privileged patient portal users to inject JavaScript via the tableArgs field of the onsiteportalactivity API. Attackers can store a payload with spaces that breaks out of an unquoted data-delete-id attribute,… |
4,8 | 0,24 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126482 OpenEMR before 8.5.0 contains an SQL injection vulnerability in SLEOB::slInvoiceNumber() in src/Billing/SLEOB.php, which concatenates the CLP01 claim identifier from uploaded X12 835 ERA files into a query without escaping or parameter binding. Authenticated users with billing permissions, or a… |
8,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126483 OpenEMR before 8.5.0 contains an SQL injection vulnerability that allows authenticated report users to manipulate queries by supplying a crafted form_facility value to interface/reports/ippf_statistics.php. Attackers can close the string literal in the facility_id WHERE clause and use boolean or… |
6,5 | 0,28 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126484 OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in printed_fee_sheet.php that allows authenticated portal patients to inject script by setting unescaped appointment comments (pc_hometext). Attackers can submit HTML payloads via the form_comments field in… |
5,1 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126485 OpenEMR before 8.5.0 contains a cross-site request forgery vulnerability in ObservationController::deleteAction that allows attackers to delete observation form records without a CSRF token. Attackers can lure a logged-in clinician to a page issuing a GET to delete.php with guessed id values,… |
5,3 | 0,15 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126486 OpenEMR before 8.5.0 contains a missing authorization vulnerability in portal/import_template.php, where several portal document template modes lack admin/forms ACL and CSRF checks. Any authenticated staff user can send mode=save_profiles to delete all template profile assignments, use other… |
7,6 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126487 OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows authenticated users to override system-wide global configuration values by storing global-prefixed keys through library/ajax/user_settings.php. Attackers can submit lab or target parameters with global: prefixed… |
8,8 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126476 OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the Application module's auto-suggest endpoint, which echoes the searchMode POST parameter unencoded into a single-quoted onClick attribute. Attackers can induce an authenticated user to submit a single-quote payload… |
5,1 | 0,23 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126477 OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in the Eye Exam (eye_mag) module that allows administrators to inject JavaScript through unencoded Eye_defaults list option titles. Attackers can store a crafted title via edit_list.php that breaks out of a jQuery string in… |
4,6 | 0,22 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126478 OpenEMR before 8.5.0 contains an SQL injection vulnerability in the Syndromic Surveillance report because the form_icd_codes[] POST array is concatenated into an unquoted numeric IN() clause without integer validation. Authenticated users can submit quote-free payloads that bypass… |
7,6 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126479 OpenEMR before 8.5.0 contains a missing authorization vulnerability in five Module Manager InstallerController actions that lack the admin/manage_modules ACL check and CSRF validation. Low-privilege users such as Front Office accounts can POST to saveConfig or SaveHooks to overwrite any module's… |
7,6 | 0,29 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126480 OpenEMR before 8.5.0 contains an sql injection vulnerability in CcrTable::insertApprovedData() that allows authenticated users to inject SQL through request parameter names used as column names. Attackers can send crafted patient_data-*-sel parameters to the revandapprove route, lacking ACL and… |
8,6 | 0,41 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126481 OpenEMR before 8.5.0 contains a path traversal vulnerability in era_payments.php and sl_eob_search.php that allows authenticated billing users to write files outside the ERA directory. Attackers can embed traversal sequences in the GS04 element of an uploaded X12 835 file to overwrite .edi or .835… |
7,2 | 0,5 % | Brak wpisu w KEV nie wyklucza ataków | |
| openemr | CVE-2026-126470 OpenEMR before 8.5.0 contains an insecure direct object reference vulnerability in the Carecoordination module that allows authenticated users with send_to_hie permission to access any patient's CCDA/CCR/QRDA documents. Attackers can supply arbitrary document or patient IDs to download, transmit,… |
8,8 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 14.11.2026, 23:02 UTC – 15.11.2026, 04:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.