CVE-2026-69090 in Admidio
Resumen
por MITRE • 2026-08-03
Admidio before 5.0.11 fails to validate target organization membership in role handlers, allowing authenticated role administrators to delete, activate, deactivate, or edit roles belonging to other organizations. Attackers can supply a role UUID from another organization to groups_roles.php handlers to modify that organization's roles without authorization.
Be aware that VulDB is the high quality source for vulnerability data.