Is there a patch available for CVE-2026-69092?

Yes, a patch is available for CVE-2026-69092. Update the affected software to the latest version immediately.

Admidio CVE-2026-69092

Q: What is the CVSS score of CVE-2026-69092?

CVE-2026-69092 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-52285 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-08-03 VulnCheck

GHSA-hpm9-98gj-g9fr

XSS Admidio

6.9

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.1 MEDIUM

Reflected XSS requires victim to click a crafted link (UI:R); scope changes as payload executes in browser context (S:C); no availability impact.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 03, 2026 - 14:33 vuln.today

Patch available

Aug 03, 2026 - 14:02 EUVD

DescriptionCVE.org

Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or LightSaml library parameters to execute code in users' browsers and hijack sessions.

AnalysisAI

Reflected XSS in Admidio's SSO/SAML endpoint allows unauthenticated remote attackers to execute arbitrary JavaScript in victims' browsers by injecting payloads into SAML Issuer elements or LightSaml library parameters, which the server echoes back unencoded in exception messages. All Admidio installations before version 5.0.11 with SSO/SAML functionality enabled are affected. Successful exploitation can lead to session hijacking and account takeover. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists.

Technical ContextAI

Admidio is an open-source PHP-based community management system commonly used by clubs and organizations. The vulnerability resides in its SSO/SAML authentication endpoint, which integrates with the LightSaml library for SAML 2.0 processing. CWE-79 (Improper Neutralization of Input During Web Page Generation) describes the root cause: when LightSaml raises an exception during SAML request parsing - such as when processing a malformed or attacker-controlled Issuer element - the raw exception message, containing unsanitized attacker input, is reflected directly into the HTTP response without encoding. Since SAML requests can be crafted by any unauthenticated party and submitted to the SP endpoint, this creates a straightforward reflected XSS injection point. The affected CPE is cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:* for versions prior to 5.0.11.

RemediationAI

Upgrade Admidio to version 5.0.11 or later, which resolves this vulnerability per the vendor security advisory at https://github.com/Admidio/admidio/security/advisories/GHSA-7jxv-38f3-6xgf. For installations that cannot immediately upgrade, a targeted compensating control is to disable or restrict access to the SSO/SAML endpoint at the web server or reverse proxy layer, blocking external unauthenticated requests to that endpoint; this eliminates the attack surface but disables SAML-based authentication entirely. Alternatively, if a WAF is deployed, adding a rule to detect and block SAML requests containing script tags or JavaScript event handlers in the Issuer field can reduce risk while retaining SSO functionality, though WAF bypass techniques exist. The patch path via upgrade is strongly preferred.