CVE-2026-117554
Last modified
CVE-2026-117554 is a medium-severity vulnerability rated 4.3/10 on the CVSS scale. Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when guests are disallowed. Attackers can set additional_guests to the remaining seat count in modules/events/events_function.php to exhaust event capacity and block other members from registering..
Description
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when guests are disallowed. Attackers can set additional_guests to the remaining seat count in modules/events/events_function.php to exhaust event capacity and block other members from registering.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-117554?
How severe is CVE-2026-117554?
How do I fix CVE-2026-117554?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-117538REDAXO before 5.21.0 contains a reflected cross-site scripti…4.1
- CVE-2026-117539darylldoyle svg-sanitizer before 1.0.0 contains CSS injectio…3.5
- CVE-2026-11754Observable discrepancy vulnerability in Seres Software syWEB…5.3
- CVE-2026-117540svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of s…7.5
- CVE-2026-117541svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught …5.3
- CVE-2026-117553Umbraco CMS before 17.7.2 and 18.2.2 contains an authenticat…7.5
- CVE-2026-117555CImg through 4.0.6 contains a heap out-of-bounds read vulner…6.1
- CVE-2026-117556zchunk before 1.5.5 contains a heap out-of-bounds read vulne…4.3
- CVE-2026-117557SDL_image through 3.4.8 and through 2.8.12 contains a stack …6.1
- CVE-2026-117558The ai-sdlc plugin MCP server through 0.31.2 contains an OS …7.8
- CVE-2026-117559DroidMind through 0.4.0 contains a command injection vulnera…7.8
- CVE-2026-11756A Deserialization of Untrusted Data vulnerability affecting …10
Are you affected by CVE-2026-117554?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST