PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-34382 Admidio CVE debrief

CVE-2026-34382 is a medium-severity vulnerability affecting Admidio, an open-source user management solution, versions 5.0.0 through 5.0.7. The vulnerability allows an attacker to permanently delete list configurations without proper CSRF validation, potentially impacting organization-wide shared lists if an administrator is tricked into visiting a malicious page. This issue has significant implications for organizations using Admidio, particularly those with administrative users who may be targeted by attackers. The vulnerability highlights the importance of proper CSRF validation and user education on security best practices.

Vendor
Admidio
Product
Unknown
CVSS
MEDIUM 4.6
CISA KEV
Not listed in stored evidence
Original CVE published
2026-03-31
Original CVE updated
2026-07-24
Advisory published
2026-03-31
Advisory updated
2026-07-24

Who should care

Administrators and users of Admidio versions 5.0.0 through 5.0.7 should be aware of this vulnerability and take steps to mitigate it. This includes ensuring that all list configurations are properly backed up and that users with administrative rights are cautious when clicking on links from unknown sources. Additionally, security teams should review the official advisory and CVE record to validate affected scope, severity, and vendor guidance.

Technical summary

The vulnerability exists in the delete mode handler of mylist_function.php in Admidio. Specifically, the code fails to validate a CSRF token when deleting list configurations. This oversight allows an attacker to craft a malicious page that, when visited by an authenticated user, silently deletes that user's list configurations. The impact is particularly severe for users with administrator rights, as their actions can result in the deletion of organization-wide shared lists. To mitigate this vulnerability, it is essential to implement proper CSRF validation and educate users on the risks associated with clicking on suspicious links.

Defensive priority

Medium-High due to potential for organization-wide impact if administrative users are targeted and lack of CSRF validation in delete operations. Defenders should prioritize implementing compensating controls, monitoring for unauthorized list configuration deletions, and educating users on security best practices to mitigate this vulnerability effectively. Regularly backing up list configurations and tracking exceptions are also crucial steps in defending against this vulnerability. Furthermore, defenders should consider the potential operational impact of this vulnerability and plan accordingly to minimize disruption in the event of an attack. Lastly, asset inventory and source tracking can help defenders identify and prioritize affected systems for remediation.

Recommended defensive actions

  • Update Admidio to version 5.0.8 or later
  • Implement CSRF protection for delete operations
  • Educate users on the risks of clicking on suspicious links
  • Regularly back up list configurations
  • Monitor for unauthorized list configuration deletions

Evidence notes

The CVE record was published on 2026-03-31T21:16:30.180Z and last modified on 2026-07-24T20:10:00.147Z. The NVD entry is currently Analyzed. The vulnerability has a CVSS score of 4.6 and is classified as CWE-352. There is limited information available about the specific details of the vulnerability, and defenders should verify the affected scope and severity with the official advisory. The CVE record does not provide additional context on the exploitation of this vulnerability in the wild.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-03-31T21:16:30.180Z and has not been modified since then. The NVD entry is currently Analyzed.