CVE-2026-34382

Admidio is an open-source user management solution. From version 5.0.0 to before version 5.0.8, the delete mode handler in mylist_function.php permanently deletes list configurations without validating a CSRF token. An attacker who can lure an authenticated user to a malicious page can silently destroy that user's list configurations — including organization-wide shared lists when the victim holds administrator rights. This issue has been patched in version 5.0.8.

• CWE-352

• https://github.com/Admidio/admidio/commit/317ec91ad3baf19d4179db6c32413812eb36d7caPatch
• https://github.com/Admidio/admidio/security/advisories/GHSA-g3mx-8jm6-rc85Exploit, Mitigation, Vendor Advisory

Published

Mar 31, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-34377ZEBRA is a Zcash node written entirely in Rust. Prior to zeb…8.1
• CVE-2026-34378OpenEXR provides the specification and reference implementat…6.5
• CVE-2026-34379OpenEXR provides the specification and reference implementat…7.1
• CVE-2026-3438A reflected cross-site scripting vulnerability exists in Son…5.1
• CVE-2026-34380OpenEXR provides the specification and reference implementat…5.9
• CVE-2026-34381Admidio is an open-source user management solution. From ver…7.5
• CVE-2026-34383Admidio is an open-source user management solution. Prior to…3.5
• CVE-2026-34384Admidio is an open-source user management solution. Prior to…7.3
• CVE-2026-34385Fleet is open source device management software. Prior to 4.…8.1
• CVE-2026-34386Fleet is open source device management software. Prior to 4.…8.8
• CVE-2026-34387Fleet is open source device management software. Prior to 4.…9.8
• CVE-2026-34388Fleet is open source device management software. Prior to 4.…7.5