CVE-2026-103021

The electronic health records application OpenEMR (versions 6.0.0 through 8.3.0) is vulnerable to username enumeration due to the way interface/globals.php processes the unauthenticated authUser login parameter. The application populates temp_authuserid and loads user_settings before successful a...