CVE-2026-111916 Admidio CVE debrief

Who should care

Defenders responsible for Admidio installations, especially those with role-restricted weblinks, should assess exposure and consider upgrading to version 5.0.16 or later. This includes administrators, security teams, and IT personnel who manage Admidio deployments and are responsible for ensuring the security and integrity of sensitive information.

Why it matters

CVE-2026-111916 is a medium-severity information disclosure vulnerability in Admidio before 5.0.16, allowing unauthenticated attackers to access role-restricted weblinks via RSS feed. Defenders should prioritize verifying exposure and consider upgrading to version 5.0.16 or later.

• Potential exposure of sensitive information in role-restricted weblinks
• Possible unauthorized access to link names, URLs, descriptions, categories, and creator names
• Need for verification of Admidio installations and upgrade to version 5.0.16 or later
• Potential impact on confidentiality and integrity of sensitive information

Technical summary

The vulnerability exists in the rss/links.php file of Admidio, where the category_view role-visibility filter is not applied, allowing unauthenticated attackers to access restricted weblinks. This issue affects Admidio versions before 5.0.16 and has a CVSS score of 6.9. Defenders should prioritize verifying exposure of Admidio installations to this vulnerability, especially if they have not upgraded to version 5.0.16 or later. The vulnerability allows attackers to access link names, URLs, descriptions, categories, and creator names from restricted LNK categories.

Defensive priority

Defenders should prioritize verifying exposure of Admidio installations to this vulnerability, especially if they have not upgraded to version 5.0.16 or later.

Recommended defensive actions

• Verify Admidio installations for exposure to this vulnerability
• Assess the risk of information disclosure for role-restricted weblinks
• Consider upgrading to Admidio version 5.0.16 or later
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, but additional information about affected versions, exploitation, and remediation may be needed for comprehensive risk assessment.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.