THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-82655 (HIGH 7.5) — Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in role_list and inject S

[NVD] CVE-2026-82655 (HIGH 7.5) — Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in role_list and inject S

mednvdPublished 2026-08-30

CVE-2026-82655 CVSS: 7.5 HIGH Published: 2026-08-30T15:16:46.310

Admidio before 5.0.12 contains a blind SQL injection vulnerability in the relation_type_list parameter of lists_show.php that allows unauthenticated attackers to execute arbitrary SQL queries. Attackers can bypass authentication by providing a dummy UUID in role_list and inject SQL through relation_type_list to extract database cont

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-82655cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82655