CVE-2026-115573

The open-source medical practice management application OpenEMR is vulnerable to a broken access control issue in versions prior to 8.3.0 . The root cause is a fail-open dispatcher in library/classes/Controller.class.php, which allows explicit controller.php dispatch to controllers missing from C...