CVE-2026-103021 | OpenEMR up to 8.2.x Authentication interface/globals.php authUser information disclosure

November 5, 2026 Yanac

A vulnerability classified as problematic was found in OpenEMR up to 8.2.x. Affected by this vulnerability is an unknown functionality of the file interface/globals.php of the component Authentication. Executing a manipulation of the argument authUser can lead to information disclosure.

This vulnerability is tracked as CVE-2026-103021. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More