CVE-2026-69091

Admidio before 5.0.11 has an authentication bypass in the forum module when configured in login-only mode. The access control logic in modules/forum.php fails to validate the login-only state, allowing unauthenticated attackers to read forum topics and posts by directly accessing the module with ...