All 4 CVE vulnerabilities found in openmrs-core, with AI-generated Chinese analysis, references, and POCs.
Vendor: openmrs
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-41258 | OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange CWE-94 | 9.1 | Critical | 2026-05-15 |
| CVE-2026-40076 | OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload CWE-22 | 7.5AI | High AI | 2026-05-06 |
| CVE-2026-40075 | OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet CWE-22 | 7.5 | - | 2026-05-05 |
| CVE-2022-23612 | Directory Traversal in OpenMRS Startup Filter CWE-22 | 7.5 | High | 2022-02-22 |
All 4 known CVE vulnerabilities affecting openmrs-core with full Chinese analysis, references, and POCs where available.