CVE-2026-39931

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-39931

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39931.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-39931

Published

2026-08-03T15:54:13.682Z

Modified

2026-08-05T03:32:32.766315506Z

Severity

8.6 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

OpenEMR Authenticated SQL Injection via backup.php Import Feature

Details

OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerability in the backup configuration import feature that allows administrators with admin or super ACL privileges to execute arbitrary DDL and DML statements against the application database by uploading a crafted SQL file at the formstep=202 parameter in backup.php. Attackers can exploit the unfiltered shellexec invocation of the mysql command-line client to extract credential hashes, modify access control tables, inject backdoor accounts, create persistent triggers or stored procedures, and write arbitrary files to the filesystem where MySQL FILE privileges and permissive securefilepriv settings are configured.

Database specific

{
    "cwe_ids": [
        "CWE-434"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39931.json"
}

References

Affected packages

Git / github.com/openemr/openemr

Affected ranges

Type

GIT

Repo

https://github.com/openemr/openemr

Events

Introduced

Last affected

6125a2fd8089c8bcc3848071c1293c60e27a7585

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.2.0"
        }
    ]
}

Affected versions

Other

v2_7_2

v2_7_2-rc1

v2_7_2-rc2

v2_7_3-rc1

v2_8_0

v2_8_1

v2_8_2

v2_8_3

v2_9_0

v3_0_0

v3_0_1

v8_2_0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-39931.json"