CVE-2026-41660

Admidio is an open-source user management solution. Prior to version 5.0.9, a logic error in Admidio's two-factor authentication reset inverts the authorization check. Non-admin users cannot remove their own TOTP configuration, but they can remove other users' TOTP, including administrators. A group leader with profile edit rights on an admin account can strip that admin's 2FA. This issue has been patched in version 5.0.9.

• CWE-863

• https://github.com/Admidio/admidio/releases/tag/v5.0.9
• https://github.com/Admidio/admidio/security/advisories/GHSA-rh3w-4ccx-prf9
• https://github.com/Admidio/admidio/security/advisories/GHSA-rh3w-4ccx-prf9

Published

May 7, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41655Admidio is an open-source user management solution. Prior to…6.5
• CVE-2026-41656Admidio is an open-source user management solution. Prior to…4.5
• CVE-2026-41657Admidio is an open-source user management solution. Prior to…4.9
• CVE-2026-41658Admidio is an open-source user management solution. Prior to…6.5
• CVE-2026-41659Admidio is an open-source user management solution. Prior to…2.7
• CVE-2026-4166A vulnerability was found in Wavlink WL-NU516U1 240425. The …3.5
• CVE-2026-41661Admidio is an open-source user management solution. Prior to…6.1
• CVE-2026-41662Admidio is an open-source user management solution. Prior to…5.2
• CVE-2026-41663Admidio is an open-source user management solution. Prior to…3.5
• CVE-2026-41664Integer overflow in memory copy size calculation in Samsung …6.6
• CVE-2026-41665Integer overflow in scratch buffer initialization size calcu…6.1
• CVE-2026-41666Integer overflow in tensor copy size calculation in Samsung …6.6