CVE-2026-33913 - Vulnerability Analysis
HighCVSS: 7.7Last Updated: March 26, 2026
OpenEMR - File Inclusion
Overview
OpenEMR < 8.0.0.3 contains a file inclusion vulnerability caused by improper handling of crafted CCDA documents in the Carecoordination module, letting authenticated users read arbitrary files on the server.
Severity & Score
Impact
Authenticated users can read arbitrary files on the server, potentially exposing sensitive information.
Mitigation
Update to version 8.0.0.3 or later.
References
Social Media Activity(2 posts)
š CVE-2026-33913 - High (7.7) OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenticated user with access to the Carecoordination module can upload a crafted CCDA document containing `` to... š https://www.thehackerwire.com/vulnerability/CVE-2026-33913/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original post
š CVE-2026-33913 - High (7.7) OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 8.0.0.3, an authenticated user with access to the Carecoordination module can upload a crafted CCDA document containing `` to... š https://www.thehackerwire.com/vulnerability/CVE-2026-33913/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postRelated Resources
Details
- CVE ID
- CVE-2026-33913
- Severity
- High
- CVSS Score
- 7.7
- Type
- file_inclusion
- Status
- confirmed
- EPSS
- 2.7%
- Social Posts
- 2
CWE
- CWE-611
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N