Admidio
CVE-2026-117554: Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_
CVE-2026-117554 Oct 27, 2026 Source: Vendor
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when guests are disallowed. Attackers can set additional_guests to the remaining seat count in modules/events/events_function.php to exhaust event capacity and block other members from registering.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://nvd.nist.gov/vuln/detail/CVE-2026-117554
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
6 lines
Showing 1–6 of 6
CVE-2026-117554
BR2026-0000-034369
unclaimed
Credited as gwangwon0807
CVE-2026-117554
BR2026-0000-034370
unclaimed
Credited as choewonwoo1817
CVE-2026-117554
BR2026-0000-034371
unclaimed
Credited as J0hnathanKim
CVE-2026-117554
BR2026-0000-034372
unclaimed
Credited as Kamba-netizen
CVE-2026-117554
BR2026-0000-034373
unclaimed
Credited as t-211
CVE-2026-117554
BR2026-0000-034374
unclaimed
Credited as xo0102