Is CVE-2026-69091 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-69091?

CVE-2026-69091 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-69091

Description

Admidio before 5.0.11 contains an authentication bypass vulnerability in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only configuration state, allowing unauthenticated attackers to read forum topics and posts by directly accessing the module with read-only parameters.