CVE-2026-47232

Description

Admidio PKCS#12 private key export action lacks CSRF protection

Overview

State

—

Assigner (CNA)

—

CVSS severity

medium

CVSS score

4.3 / 10

CVSS vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Effective score

4.3 / 10 MEDIUM source: CNA overview

CWE(s)

—

Reserved

—

Published

—

Last updated

—

Source

https://www.tenable.com/cve/CVE-2026-47232

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2026-57209

Assigner

GitHub_M

Published

Aug 12, 2026, 1:18:55 PM

Updated

Aug 12, 2026, 1:32:17 PM

EUVD base score (CVSS 3.1)

4.3 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EUVD-reported EPSS

0.0000

Vendors

Admidio

Products

admidio (< 5.0.10)

Aliases

GHSA-4rgq-38mh-9xqg

ENISA description: Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` exports a PKCS#12 bundle containing the configured private key and certificate, but the CSRF validation line is commented out. A forged cross-site POST from an administrator session can therefore trigger private key export without a valid form token. Version 5.0.10 contains a fix.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (2)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://nvd.nist.gov/vuln/detail/CVE-2026-47232 tenable:nvd.nist.gov
• https://www.cve.org/CVERecord?id=CVE-2026-47232 tenable:www.cve.org

• Microsoft and Adobe Patch Tuesday, March 2026 Security Update Review
  web:blog.qualys.com

  Microsoft has rolled out its March 2026 Patch Tuesday updates, delivering a fresh batch of security fixes designed to keep Windows environments protected from emerging threats.

  2026-06-19 02:54 UTC
• Security Update Guide - Loading - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-06-19 02:54 UTC
• March 13, 2026—Hotpatch KB5084597 (OS Builds 26200.7982 and 26100.7982 ...
  web:support.microsoft.com

  The following summary outlines key issues addressed by this update. The bold text within the brackets indicates the item or area of the change. [Networking] Fixed: This update addresses a security issue in the Windows Routing and Remote Access Service (RRAS) management tool. If you connect to a malicious remote server, an attacker could disrupt the tool or run code on your device. For more ...

  2026-06-19 02:54 UTC
• May 2026 Patch Tuesday: Updates and Analysis | CrowdStrike
  web:www.crowdstrike.com

  Microsoft has released security updates for 130 vulnerabilities, including 30 critical, in its May 2026 Patch Tuesday rollout.

  2026-06-19 02:54 UTC
• Microsoft fixes six zero-days on February 2026 Patch Tuesday
  web:www.csoonline.com

  Microsoft highlighted six new and actively exploited vulnerabilities among the 60 fixes issued in today's February Patch Tuesday releases.

  2026-06-19 02:54 UTC
• Microsoft Patch Tuesday - May 2026 - Lansweeper
  web:www.lansweeper.com

  Which vulnerabilities, issues, and other things did Microsoft update? Discover what's new using Lansweeper's Patch Tuesday May 2026 summary.

  2026-06-19 02:54 UTC
• Oracle Critical Patch Update Advisory - April 2026
  web:www.oracle.com

  This Critical Patch Update contains 481 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at April 2026 Critical Patch Update: Executive Summary and Analysis.

  2026-06-19 02:54 UTC
• Oracle Critical Security Patch Update Advisory - May 2026
  web:www.oracle.com

  This Critical Security Patch Update contains 35 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Security Patch Update and other Oracle Software Security Assurance activities is located at May 2026 Critical Security Patch Update: Executive Summary and Analysis.

  2026-06-19 02:54 UTC
• Oracle Critical Security Patch Update June 2026 | Tenable®
  web:www.tenable.com

  Oracle's Critical Security Patch Update (CSPU) for June 2026 , its second CSPU, addresses 243 CVEs , including 122 critical updates.

  2026-06-19 02:54 UTC
• Patch Tuesday June 2026: Security Updates & CVE Analysis
  web:zecurit.com

  Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

  2026-06-19 02:54 UTC

Only Available for Registered Users. Sign in to view.