CVE-2026-32127: SQL Injection Vulnerability in ajax graphs library (OpenEMR)
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, OpenEMR contains a SQL injection vulnerability in the ajax graphs library that can be exploited by authenticated attackers. The vulnerability exists due to insufficient input validation in the ajax graphs library. This vulnerability is fixed in 8.0.0.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenEMRto a version that resolves this vulnerability.Fixed in 8.0.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-32127?
CVE-2026-32127 is classified as a high severity vulnerability due to its potential for SQL injection exploits.
How do I fix CVE-2026-32127?
To fix CVE-2026-32127, upgrade OpenEMR to version 8.0.0.1 or higher.
What type of vulnerability is CVE-2026-32127?
CVE-2026-32127 is an SQL injection vulnerability affecting the ajax graphs library in OpenEMR.
Who is affected by CVE-2026-32127?
Authenticated users of OpenEMR versions prior to 8.0.0.1 are at risk from CVE-2026-32127.
What can an attacker do with CVE-2026-32127?
An attacker can exploit CVE-2026-32127 to execute arbitrary SQL commands in the database.