[ Vendor · 7 CVEs ]
Admidio
CVEs affecting Admidio published in the last 30 days, plus any Admidio CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111916 | 17 Oct 2026 | CVSS 5.3 | admidioAdmidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because… | |
| CVE-2026-111912 | 17 Oct 2026 | CVSS 6.5 | admidioAdmidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated… | |
| CVE-2026-111913 | 17 Oct 2026 | CVSS 4.3 | admidioAdmidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export… | |
| CVE-2026-111914 | 17 Oct 2026 | CVSS 6.5 | admidioAdmidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated… | |
| CVE-2026-109327 | 12 Oct 2026 | CVSS 6.1 | admidioAdmidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a reflected cross-site scripting vulnerability in system/redirect.php that allows… | |
| CVE-2026-109328 | 12 Oct 2026 | CVSS 6.1 | admidioAdmidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw… | |
| CVE-2026-109329 | 12 Oct 2026 | CVSS 6.5 | admidioAdmidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users… |