What is CVE-2026-69092?
CVE-2026-69092 is a reflected cross-site scripting (XSS) vulnerability in Admidio versions before 5.0.11, located in the SSO/SAML endpoint where unencoded exception messages are echoed. Unauthenticated attackers can inject arbitrary JavaScript via SAML Issuer elements or LightSaml library parameters, potentially compromising user sessions. Users must upgrade to version 5.0.11 or later immediately.
Azərbaycanca: CVE-2026-69092, Admidio proqramının 5.0.11 versiyasından əvvəlki versiyalarında SSO/SAML endpoint-də aşkarlanmış əks olunan XSS (reflected cross-site scripting) zəifliyidir. Bu zəiflik autentifikasiya olunmamış hücumçulara SAML Issuer elementləri və ya LightSaml kitabxana parametrləri vasitəsilə ixtiyari JavaScript kodu yeritməyə imkan verir. Admidio istifadəçiləri təcili olaraq 5.0.11 və ya daha yuxarı versiyaya yeniləmə etməlidir.
Related CVEs
link basis: same weakness class CWE-79
FAQ2
Which versions of Admidio are affected by CVE-2026-69092?
This reflected XSS vulnerability affects all versions of Admidio prior to 5.0.11.
How do I protect against CVE-2026-69092?
Users must immediately upgrade Admidio to version 5.0.11 or later.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.