CVE-2025-68277
Medium · 5.0CVSS
5.0
EPSS
0.2%
Published
Feb 25, 2026
CISA due date
—
The record
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to version 7.0.4, when a link is sent via Secure Messaging, clicking the link opens the website within the OpenEMR/Portal site. This behavior could be exploited for phishing. Version 7.0.4 patches the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87649 UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a… CWE-451
- CVE-2026-87653 UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36… CWE-451
- CVE-2026-87635 UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-451
- CVE-2026-87624 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36… CWE-451
- CVE-2026-87597 UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36… CWE-451
- CVE-2026-87583 UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36… CWE-451
- CVE-2026-87567 UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a… CWE-451
- CVE-2026-87559 UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote… CWE-451