EUVD-2026-119550

OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated filepath parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as the web...

PT-2026-139966

Name of the Vulnerable Software and Affected Versions OpenEMR versions prior to 8.3.0 Description Broken access control and path traversal exist in the fax/sms module disposeDocument action. Authenticated low-privilege users can exploit the unvalidated file path parameter to read the sqlconf.php...

CVE-2026-124450: openemr: OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module…

OpenEMR before 8.3.0 contains a broken access control and path traversal vulnerability in the fax/sms module disposeDocument action via an unvalidated filepath parameter. Authenticated low-privilege users can read sqlconf.php to recover database credentials and write arbitrary files as the web...

CVE-2026-103020 OpenEMR: Unauthenticated Information Disclosure in admin.php Exposes Database Names and Versions

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, the webroot admin.php multisite administration page is enabled without an authentication check, reads database configuration from sqlconf.php, and connects to each configured...