CVE-2026-33910

HIGH

OpenEMR <=8.0.0.2 Patient Selection - SQL Injection

Title source: manual

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-33910. PoCs published by ChrisSub08.

AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2026-33910, demonstrating a SQL injection vulnerability in OpenEMR 8.0.0.2. The exploit leverages insufficient input validation in the patient selection feature, allowing authenticated attackers to inject malicious SQL code via the `layout_options` table.

Description

OpenEMR is a free and open source electronic health records and medical practice management application. Versions up to and including 8.0.0.2 contain a SQL injection vulnerability in the patient selection feature that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the patient selection feature. Version 8.0.0.3 contains a patch.

Exploits (1)

nomisec WORKING POC

by ChrisSub08 · poc

https://github.com/ChrisSub08/CVE-2026-33910_SqlInjectionVulnerabilityOpenEMR8.0.0.2

View Code ZIP pw:eip

This repository contains a functional proof-of-concept for CVE-2026-33910, demonstrating a SQL injection vulnerability in OpenEMR 8.0.0.2. The exploit leverages insufficient input validation in the patient selection feature, allowing authenticated attackers to inject malicious SQL code via the `layout_options` table.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: OpenEMR < 8.0.0.3

Auth required

Prerequisites: Authenticated access to OpenEMR · Admin privileges to insert payload into `layout_options` table

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Apr 09, 2026 Full analysis →

References (3)

Core 3

Core References

X_Refsource_Confirm x_refsource_confirm

https://github.com/openemr/openemr/security/advisories/GHSA-x32c-xj5g-7jx7

X_Refsource_Misc x_refsource_misc

https://github.com/openemr/openemr/commit/73db3264aed253684532839380cae3b0a56c83d2

View Writeup ZIP pw:eip

X_Refsource_Misc x_refsource_misc

https://github.com/openemr/openemr/releases/tag/v8_0_0_3

Scores

CVSS v3 7.2

EPSS 0.0043

EPSS Percentile 33.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-89

Status published

Products (2)

open-emr/openemr < 8.0.0.3

openemr/openemr < 8.0.0.3

Published Mar 25, 2026

Tracked Since Mar 26, 2026