CVE-2026-39932

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

August 3, 2026

Last Seen

August 4, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in OpenEMR Exposes Servers to Attacks72.0

A critical remote code execution vulnerability, CVE-2026-39932, affects OpenEMR versions up to 8.2.0. The flaw arises from an unsafe eval() call in the document category tree component, allowing attackers to execute arbitrary PHP code stored in the categories database table. This vulnerability can b...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in OpenEMR Exposes Servers to Attacks

Aug 4·2 sources

Related Articles (3)

Unclassified News Aug 2, 2026 The eval() That Nobody Was Supposed to Find: SQL Import Chains to OS Command Execution in OpenEMR 8.0.0.3 - Jiva Security jivasecurity.com Open source

jivasecurity.com·Aug 4

Cvefeed High Severity Advisories Aug 3, 2026 CVE-2026-39932 - OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection cvefeed.io Open source

cvefeed.io·Aug 4

Critical OpenEMR RCE Lets Database Payloads Trigger PHP Code Execution

Mallory.Ai·Aug 3

Related Entities

Sql Injection Ubuntu CVE-2026-39931 CWE-94 - Code Injection Cwe-89 - SQL Injection CWE-77 - Command Injection T1059 - Command and Scripting Interpreter T1059.008 - Network Device CLI T1190 - Exploit Public-Facing Application Alpine Linux Apache Laminas