Home / Vulnerability Intelligence / CVE-2026-32127

CVE-2026-32127 - Vulnerability Analysis

HighCVSS: 8.8

Last Updated: March 13, 2026

OpenEMR - SQL Injection

Published: March 11, 2026Updated: March 13, 2026PoC AvailableRemote Exploitable

Overview

OpenEMR < 8.0.0.1 contains a SQL injection caused by insufficient input validation in the ajax graphs library, letting authenticated attackers execute arbitrary SQL commands.

Severity & Score

Severity: High

CVSS Score: 8.8

EPSS Score: 3.0%(Probability of exploitation in next 30 days)

Impact

Authenticated attackers can execute arbitrary SQL commands, potentially leading to data disclosure or modification.

Mitigation

Update to version 8.0.0.1 or later.

References

https://github.com/openemr/openemr/security/advisories/GHSA-v8q6-h79f-736x

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 13, 2026

🟠 CVE-2026-32127 - High (8.8) OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the ajax graphs library that can be exploited by authenticated attackers. ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32127/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 13, 2026

View original post

GitHub Repositories(1 repo)

https://github.com/ChrisSub08/CVE-2026-32127_SqlInjectionVulnerabilityOpenEMR8.0.0

Related Resources

Details

CVE ID: CVE-2026-32127
Severity: High
CVSS Score: 8.8
Type: sql_injection
Status: confirmed
EPSS: 3.0%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score

3.0%Probability of exploitation in the next 30 days