admidio

Top products

The 15 most recently published vulnerabilities affecting admidio.

• CVE-2026-69094Admidio before 5.0.11 IDOR via save_temporary mylist_function.php4.3Aug 3, 2026
• CVE-2026-69093Admidio before 5.0.11 CSRF via category-report preferences4.6Aug 3, 2026
• CVE-2026-69092Admidio before 5.0.11 Reflected XSS via SSO/SAML Endpoint6.5Aug 3, 2026
• CVE-2026-69091Admidio before 5.0.11 Authentication Bypass via forum.php7.5Aug 3, 2026
• CVE-2026-69090Admidio before 5.0.11 Cross-Organization Role Modification4.9Aug 3, 2026
• CVE-2018-25370Admidio 3.3.5 Cross-Site Request Forgery via roles_function.php5.3May 25, 2026
• CVE-2026-42194Incomplete fix for CVE-2026-32812: SSRF in admidio6.8May 7, 2026
• CVE-2026-41671Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validation6.8May 7, 2026
• CVE-2026-41670Admidio: SAML Response Sent to Unvalidated Assertion Consumer Service URL from AuthnRequest8.2May 7, 2026
• CVE-2026-41669Admidio: SAML Signature Validation Result Ignored — Forged AuthnRequests and LogoutRequests Processed8.2May 7, 2026
• CVE-2026-41663Admidio: CSRF on Admin Preferences Triggers Unauthorized Backup, .htaccess Write, and Email Send3.5May 7, 2026
• CVE-2026-41662Admidio: Missing Minimum Administrator Check in Role Membership Removal5.2May 7, 2026
• CVE-2026-41661Admidio: Reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion6.1May 7, 2026
• CVE-2026-41660Admidio: Inverted 2FA Reset Authorization Check Lets Group Leaders Strip Admin TOTP7.1May 7, 2026
• CVE-2026-41659Admidio: Hidden Profile Field Values Leaked via Blind Search Oracle in Member Assignment2.7May 7, 2026