CVE-2026-104133

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, interface/modules/custommodules/oe-module-dorn/public/compendiuminstall.php checks authentication and CSRF but does not require the admin/users ACL enforced by sibling DORN...

CVE-2026-104133

Prior to version 8.3.0 , OpenEMR is vulnerable to a missing authorization flaw in the DORN module. Specifically, the file interface/modules/custom_modules/oe-module-dorn/public/compendium_install.php validates authentication and CSRF but fails to enforce the admin/users ACL required by other DORN...