CVE-2026-111914

Admidio versions 5.0.11 through 5.0.16 contain a broken access control vulnerability in the modules/inventory/inventory_data.php component. This flaw allows authenticated users to bypass the inventory_module_enabled restriction. By requesting the DataTables JSON feed , an attacker with any valid ...

EUVD-2026-103306

Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventorydata.php that allows authenticated users to bypass the inventorymoduleenabled restriction. Attackers with any valid login can request the DataTables JSON feed to read every inventory ite...