CVE-2026-39931 | OpenEMR up to 8.2.0 Backup Configuration Import backup.php form_step sql injection

A vulnerability described as problematic has been identified in OpenEMR up to 8.2.0. This impacts an unknown function of the file backup.php of the component Backup Configuration Import. The manipulation of the argument form_step results in sql injection.

This vulnerability is cataloged as CVE-2026-39931. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More