Is CVE-2026-111914 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111914?

CVE-2026-111914 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-111914

Description

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypass the inventory_module_enabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory item and keeper names, even when the module is disabled.