CVE-2026-69091: Admidio

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by directly accessing the module with read-only parameters.

Affected products

• Admidio Admidio: before 5.0.11 (fixed in 5.0.11)

Published 2026-08-03. Last modified 2026-09-09.