HIGH

CVE-2026-39931

Open-emr Openemr 2026-08-03 CVSS v3.1

CVSS

7.2

Description

OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL privileges to execute arbitrary DDL and DML statements against the application database by uploading a crafted SQL file at the form_step=202 parameter in backup.php. Attackers can exploit the unfiltered shell_exec invocation of the mysql command-line client to extract credential hashes, modify access control tables, inject backdoor accounts, create persistent triggers or stored procedures, and write arbitrary files to the filesystem where MySQL FILE privileges and permissive secure_file_priv settings are configured.

Weakness (CWE)

CWE-434 Unrestricted File Upload

EPSS Score

0.43%

Probability of exploitation in next 30 days

37th percentile

References

https://jivasecurity.com/writeups/openemr-backup-import-arbitrary-sql-cve-2026-39931 Exploit, Third Party Advisory https://www.vulncheck.com/advisories/openemr-authenticated-sql-injection-via-backup-php-import-feature Exploit, Third Party Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE