CVE-2026-41663

Admidio is an open-source user management solution. Prior to version 5.0.9, several administrative operations in Admidio's preferences module (database backup, test email, htaccess generation) fire via GET requests with no CSRF token validation. Because SameSite=Lax cookies travel with top-level GET navigations, an attacker forces an authenticated admin to trigger these actions from a malicious page. This issue has been patched in version 5.0.9.

• CWE-352

• https://github.com/Admidio/admidio/releases/tag/v5.0.9
• https://github.com/Admidio/admidio/security/advisories/GHSA-rw74-vc9h-534j
• https://github.com/Admidio/admidio/security/advisories/GHSA-rw74-vc9h-534j

Published

May 7, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41658Admidio is an open-source user management solution. Prior to…6.5
• CVE-2026-41659Admidio is an open-source user management solution. Prior to…2.7
• CVE-2026-4166A vulnerability was found in Wavlink WL-NU516U1 240425. The …3.5
• CVE-2026-41660Admidio is an open-source user management solution. Prior to…7.1
• CVE-2026-41661Admidio is an open-source user management solution. Prior to…6.1
• CVE-2026-41662Admidio is an open-source user management solution. Prior to…5.2
• CVE-2026-41664Integer overflow in memory copy size calculation in Samsung …6.6
• CVE-2026-41665Integer overflow in scratch buffer initialization size calcu…6.1
• CVE-2026-41666Integer overflow in tensor copy size calculation in Samsung …6.6
• CVE-2026-41667Integer overflow in constant tensor data size calculation in…6.6
• CVE-2026-41669Admidio is an open-source user management solution. Prior to…8.2
• CVE-2026-4167A vulnerability was determined in Belkin F9K1122 1.00.33. Th…8.8