CVE-2026-32817 - Vulnerability Analysis

Overview

Admidio 5.0.0 through 5.0.6 contains a broken access control vulnerability caused by improper permission checks and missing CSRF validation in documents and files module, letting unauthenticated or low-privilege users delete folders or files, exploit requires public mode enabled or user with view-only access.

Severity & Score

Impact

Unauthenticated or low-privilege users can permanently delete documents and files, leading to data loss and disruption of service.

Mitigation

Upgrade to version 5.0.7 or later.

References

• https://github.com/Admidio/admidio/security/advisories/GHSA-rmpj-3x5m-9m5f

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner