https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:02:39.393213+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-82657 CVE-2026-82657 — Admidio before 5.0.12 Authentication Bypass via RSS feeds 2026-10-07T19:02:39.419343+00:00

Affected: admidio

Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules. Unauthenticated attackers can retrieve forum topics and announcements by sending GET requests to rss/forum.php or rss/announcements.php, disclosing titles, full post text, author names, and timestamps.