CVE-2026-41658 | admidio up to 5.0.8 POST modules/inventory.php item_delete authorization (GHSA-xqv4-xm7h-52cv)

A vulnerability was found in admidio up to 5.0.8. It has been rated as problematic. The impacted element is the function item_delete of the file modules/inventory.php of the component POST Handler. This manipulation causes missing authorization.

This vulnerability appears as CVE-2026-41658. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More