Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation logic allows any user who can participate in an event to register OTHER users by manipulating the user_uuid GET parameter. The condition uses || (OR), meaning if possibleToParticipate() returns true (event is open for participation), ANY user - not just leaders - can specify a different user_uuid and register/cancel participation for that user. The code then operates on $user->getValue('usr_id') (the target user from user_uuid) rather than the current user. This vulnerability is fixed in 5.0.6.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30927 Unauthenticated User Registration Vulnerability in Admidio Event Management Module https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30927
Post summary
A new unauthenticated user registration vulnerability (CVE‑2026‑30927) affecting the Admidio Event Management Module has been disclosed, with details posted on Vulmon.
🚨*CVE* CVE-2026-30927 Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation logic allows any user who can parti… https://www.cve.org/CVERecord?id=CVE-2026-30927 ----- Traducción: CVE-2026-30927 Adm… http://infoflow.cloud`
Post summary
The post references CVE-2026-30927, identifying a flaw in Admidio's event participation logic before version 5.0.6, but offers no PoC, exploit, patch, or evidence of active use.
CVE-2026-30927 Admidio is an open-source user management solution. Prior to 5.0.6, in modules/events/events_function.php, the event participation logic allows any user who can parti… https://www.cve.org/CVERecord?id=CVE-2026-30927
Post summary
The excerpt briefly notes CVE-2026-30927 in Admidio, mentioning a flaw in event participation logic prior to v5.0.6, but offers no PoC, exploit, patch, or detailed technical information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30927 - Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter Intel Report: https://ift.tt/jV3vhu7
Post summary
The tweet announces CVE-2026-30927, detailing an IDOR flaw in Admidio that lets non‑leaders register any user for events via the user_uuid parameter.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | admidio | admidio | - | - | - |