CVE-2026-24848 — OpenEMR Arbitrary File Write leading to Remote Code Execution

CVE-2026-24848

OpenEMR Arbitrary File Write leading to Remote Code Execution PUBLISHED

Description (CNA)

OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDocument() method in EtherFaxActions.php allows authenticated users to write arbitrary content to arbitrary locations on the server filesystem. This vulnerability can be exploited to achieve Remote Code Execution (RCE) by uploading malicious PHP web shells.

Affected (CNA)

Vendor / product	Versions
openemr / openemr	affected <= 7.0.4

CWE

CWE-22

References

https://github.com/openemr/openemr/security/advisories/GHSA-5vp5-4rm6-h4c9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.