LOWCVSS 3.10% EPSS
OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru("groups") and discloses the web server's Unix group memberships. Authenticated attackers with fax module access can supply a nonexistent jid value to reveal groups such as adm or shadow, aiding privilege escalation planning.
Published 2026-11-13 · last modified 2026-11-13
| Vendor | Product |
|---|---|
| open-emr | openemr |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.