high7.5
CVE-2026-69091
Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode.
Impact
Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by directly accessing the module with read-only parameters.
Affected products
| Product | Affected versions |
|---|---|
| Admidio | before 5.0.11 |
Versions were read from the advisory text. No structured product data has been published for this record yet.