CVE-2026-103020

In OpenEMR versions prior to 8.3.0 , the webroot admin.php multisite administration page is enabled without an authentication check . This vulnerability allows an unauthenticated network actor to access the page, which reads database configurations from sqlconf.php and connects to configured site...