CVE-2026-39931

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 4, 2026

Last Seen

August 4, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in OpenEMR Exposes Servers to Attacks72.0

A critical remote code execution vulnerability, CVE-2026-39932, affects OpenEMR versions up to 8.2.0. The flaw arises from an unsafe eval() call in the document category tree component, allowing attackers to execute arbitrary PHP code stored in the categories database table. This vulnerability can b...