Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N H P N N N 4.8 .0015 4.5 —
AFFECTED Product Versions Fixed openemr unspecified —
TIMELINE Jul 29 Reserved by VulnCheck Aug 3 Published (CNA: VulnCheck) Aug 13 EXPLOIT PUBLISHED — CVE-2026-67612 (openemr). Public exploit reference added.
OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the template save mode, which only filters literal PHP open tags. Attackers can exploit the lack of output encoding at the template retrieval endpoint combined with missing HttpOnly cookie attributes to exfiltrate session tokens via document.cookie access, enabling full session hijacking of any admin, clinician, or portal patient who views a poisoned template.
| Date | Event | Detail |
|---|---|---|
| July 29, 2026 | Reserved | Reserved by VulnCheck |
| August 3, 2026 | Published | Published (CNA: VulnCheck) |
| August 13, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-67612 (openemr). Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| openemr | openemr | — | — | — |
Authoritative record: CVE-2026-67612 at cve.org
Vendors: openemr
Weaknesses: CWE-79
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-67612 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.