CVE-2026-111914

Admidio versions 5.0.11 through 5.0.16 contain a broken access control vulnerability in the modules/inventory/inventory_data.php component. This flaw allows authenticated users to bypass the inventory_module_enabled restriction. By requesting the DataTables JSON feed , an attacker with any valid ...