CVE-2026-115573 - OpenEMR: Broken Access Control in controller.php Enables Insurance Routing Credential Hijack and PHI Enumeration
CVE ID :CVE-2026-115573 Published : Nov. 5, 2026, 8:17 p.m. | 51 minutes ago Description :OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, library/classes/Controller.class.php allows explicit controller.php dispatch to...