CVE-2024-37734

CVE-2024-37734 is a critical privilege escalation vulnerability affecting OpenEMR 7.0.2, allowing remote attackers to gain elevated access through a crafted POST request manipulating the noteid parameter. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability compromise. Despite its critical severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.