CVE-2026-24848: OpenEMR Arbitrary File Write leading to Remote Code Execution
OpenEMR is a free and open source electronic health records and medical practice management application. In 7.0.4 and earlier, the disposeDocument() method in EtherFaxActions.php allows authenticated users to write arbitrary content to arbitrary locations on the server filesystem. This vulnerability can be exploited to achieve Remote Code Execution (RCE) by uploading malicious PHP web shells.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24848?
CVE-2026-24848 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2026-24848?
To fix CVE-2026-24848, upgrade to OpenEMR version 7.0.5 or later where the vulnerability is patched.
Who is affected by CVE-2026-24848?
OpenEMR versions 7.0.4 and earlier are affected by CVE-2026-24848.
What type of vulnerability is CVE-2026-24848?
CVE-2026-24848 is an arbitrary file write vulnerability that can lead to remote code execution.
What can attackers do with CVE-2026-24848?
Attackers can exploit CVE-2026-24848 to execute arbitrary code on the server, compromising the security of the affected system.