https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T13:53:54.814502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337586 EUVD-2026-337586 2026-10-27T13:53:54.816830+00:00 EUVD-2026-337586 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25370 fkie_cve-2018-25370 2026-10-27T13:53:54.816860+00:00

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles_function.php with parameters like rol_assign_roles, rol_approve_users, and rol_edit_user set to 1 to escalate privileges without authentication.

 https://cve.radiocsirt.org/vuln/ghsa-76g9-r7wc-v9q8 GHSA-76g9-r7wc-v9q8 2026-10-27T13:53:54.816889+00:00

Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking. Attackers can craft malicious HTML forms targeting roles_function.php with parameters like rol_assign_roles, rol_approve_users, and rol_edit_user set to 1 to escalate privileges without authentication.