PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-47230 Admidio CVE debrief

A vulnerability in Admidio, a user management solution, allows users with upload rights in one folder to rename and overwrite files in another folder they can view but not upload to. This issue, fixed in version 5.0.10, highlights the need for stricter access controls and monitoring of file operations. The vulnerability exists due to inadequate checks in the `modules/documents-files.php` file, specifically in the `DocumentsService::renameFile()` function, which permits renaming and overwriting of files without proper authorization. This could lead to potential data tampering and unauthorized modifications. System administrators and security teams should assess exposure and update 5

Vendor
Admidio
Product
Unknown
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-08-12
Original CVE updated
2026-09-09
Advisory published
2026-08-12
Advisory updated
2026-09-09

Who should care

System administrators and security teams responsible for Admidio deployments should assess exposure and prioritize remediation. This vulnerability may impact organizations using Admidio for user management and file sharing.

Why it matters

CVE-2026-47230 highlights a vulnerability in Admidio that allows users to rename and overwrite files in folders they cannot upload to, but can view. This issue requires verification of access controls and monitoring of file operations to prevent potential data tampering and unauthorized modifications.

  • Potential unauthorized file modifications
  • Increased risk of data tampering
  • Need for enhanced monitoring of file operations

Technical summary

The vulnerability in Admidio's `modules/documents-files.php` file allows users with upload rights in one folder to rename and overwrite files in another folder they can view but not upload to. This is due to the `DocumentsService::renameFile()` function resolving the target file via `getFileForDownload()`, which permits view-readable files, without requiring upload rights on the file's source folder.

Defensive priority

Medium

Recommended defensive actions

  • Review and update access controls for file operations in Admidio to ensure proper authorization
  • Monitor file operations and user activities for suspicious behavior
  • Verify that version 5.0.10 or later is deployed to address the vulnerability
  • Perform a thorough review of existing file permissions and folder access controls
  • Implement additional monitoring to detect and respond to potential unauthorized file modifications
  • Conduct a security audit to identify and address any other potential vulnerabilities in the Admidio deployment
  • Establish a process for quickly applying security patches and updates to Admidio

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. However, the corpus does not establish versions, exploitation, impact, or remediation beyond the provided information.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-47230 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-47230

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-47230 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-47230

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.