CVE-2026-109329 - Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Bypass via members_assignment.php
CVE ID :CVE-2026-109329 Published : Oct. 12, 2026, 5:17 p.m. | 14 minutes ago Description :Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. Attackers can submit...