CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product admidio:admidio. Show all products

35 CVEs, showing 1 to 35
CVESeverityTitlePublished
CVE-2026-111916Medium 5.3Admidio before 5.0.16 Information Disclosure via rss/links.php Weblinks Feed
Assigned by VulnCheck
Oct 17, 2026
CVE-2026-111914Medium 6.5Admidio 5.0.11 before 5.0.16 Broken Access Control via inventory_data.php
Assigned by VulnCheck
Oct 17, 2026
CVE-2026-111913Medium 4.3Admidio 5.0.0 before 5.0.16 Authorization Bypass via pdfl Mode in lists_show.php
Assigned by VulnCheck
Oct 17, 2026
CVE-2026-111912Medium 6.5Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update
Assigned by VulnCheck
Oct 17, 2026
CVE-2026-109329Medium 6.5Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109328Medium 6.1Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via Registration Name
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-109327Medium 6.1Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.php
Assigned by VulnCheck
Oct 12, 2026
CVE-2026-53760Medium 5.2Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests
Assigned by GitHub_M
Sep 4, 2026
CVE-2026-82658Medium 4.3Admidio before 5.0.12 Broken Access Control via profile_function.php
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-82657High 7.5Admidio before 5.0.12 Authentication Bypass via RSS feeds
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-82656Low 2.6Admidio before 5.0.12 Path Traversal via Photo ZIP Download
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-82655High 7.5Admidio before 5.0.12 SQL Injection via relation_type_list
Assigned by VulnCheck
Aug 30, 2026
CVE-2026-47234Medium 4.4Admidio writes session IDs and auto-login cookie values to application logs
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47233Medium 6.5Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47232Medium 4.3Admidio PKCS#12 private key export action lacks CSRF protection
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47231High 8.1Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47230Medium 6.5Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47229Medium 5.4Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47228Medium 5.2Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47227Medium 6.5Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php`
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-47226Medium 6.5Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges
Assigned by GitHub_M
Aug 12, 2026
CVE-2026-34384High 7.3Admidio is an open-source user management solution.Mar 31, 2026
CVE-2026-34383Low 3.5Admidio is an open-source user management solution.Mar 31, 2026
CVE-2026-34382Medium 4.6Admidio is an open-source user management solution.Mar 31, 2026
CVE-2026-34381High 7.5Admidio is an open-source user management solution.Mar 31, 2026
CVE-2026-32817Critical 9.1Admidio is an open-source user management solution.Mar 20, 2026
CVE-2026-32813High 8.0Admidio is an open-source user management solution.Mar 20, 2026
CVE-2026-32812Medium 6.8Admidio is an open-source user management solution.Mar 20, 2026
CVE-2026-32757Medium 5.4Admidio is an open-source user management solution.Mar 20, 2026
CVE-2026-32756High 8.8Admidio is an open-source user management solution.Mar 20, 2026
CVE-2026-32818Medium 6.5Admidio is an open-source user management solution.Mar 19, 2026
CVE-2026-32816Medium 5.7Admidio is an open-source user management solution.Mar 19, 2026
CVE-2026-32755Medium 5.7Admidio is an open-source user management solution.Mar 19, 2026
CVE-2026-30927Medium 5.4Admidio is an open-source user management solution.Mar 10, 2026
CVE-2025-62617High 7.2Admidio is an open-source user management solution.Oct 22, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.