CVE-2026-25928 | OpenEMR up to 8.0.0.2 DICOM Export path traversal (GHSA-rppw-f689-6hrm)

March 19, 2026 Yanac

A vulnerability described as critical has been identified in OpenEMR up to 8.0.0.2. Affected by this issue is some unknown functionality of the component DICOM Export. Executing a manipulation can lead to path traversal.

This vulnerability appears as CVE-2026-25928. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More