THREAT OPS › Threat News › [NVD] CVE-2026-44715 — OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level ac
[NVD] CVE-2026-44715 — OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level ac
CVE-2026-44715 CVSS: None Published: 2026-09-11T22:16:37.113
OpenMRS is an open source electronic medical record system platform. Prior to versions 1.23.0 and 2.10.0, an authenticated user can trigger administrative DWR services. Specifically, the `startHl7ArchiveMigration` method is accessible, which should be restricted to admin-level accounts. Versions 1.23.0 and 2.10.0 patch the issue.
Indicators of compromise
- CVE-2026-44715cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44715