https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T23:17:56.976463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-24849 CVE-2026-24849 — OpenEMR Arbitrary File Read Vulnerability 2026-10-18T23:17:56.992534+00:00

Affected: openemr

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, the `disposeDocument()` method in `EtherFaxActions.php` allows authenticated users to read arbitrary files from the server filesystem. Any authenticated user (regardless of privilege level) can exploit this vulnerability to read sensitive files. Version 7.0.4 patches the issue.