CVE-2026-39932 | OpenEMR up to 8.2.0 Document Category Tree Tree.class.php eval code injection

A vulnerability labeled as critical has been found in OpenEMR up to 8.2.0. The impacted element is the function eval of the file library/classes/Tree.class.php of the component Document Category Tree. Executing a manipulation can lead to code injection.

This vulnerability is tracked as CVE-2026-39932. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More