CVE-2026-33305 | OpenEMR up to 8.0.0.2 FaxSMS getNotificationLog incorrect behavior order (GHSA-r973-h5cq-35rc)

March 20, 2026 Yanac

A vulnerability identified as critical has been detected in OpenEMR up to 8.0.0.2. Impacted is the function getNotificationLog of the component FaxSMS Module. This manipulation causes incorrect behavior order.

The identification of this vulnerability is CVE-2026-33305. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More