Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 15:42:56 +0000 CVE-2026-82657 — Admidio before 5.0.12 Authentication Bypass via RSS feeds https://vulnerability.circl.lu/vuln/cve-2026-82657 <p><strong>Affected:</strong> admidio</p> <p>Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules. Unauthenticated attackers can retrieve forum topics and announcements by sending GET requests to rss/forum.php or rss/announcements.php, disclosing titles, full post text, author names, and timestamps.</p> <p><strong>Affected:</strong> admidio</p> <p>Admidio before 5.0.12 fails to enforce login-only module restrictions in RSS feed endpoints for forum and announcements modules. Unauthenticated attackers can retrieve forum topics and announcements by sending GET requests to rss/forum.php or rss/announcements.php, disclosing titles, full post text, author names, and timestamps.</p> https://vulnerability.circl.lu/vuln/cve-2026-82657