Skip to content
OpenAdvisories

Vendor

redaxo

27 known vulnerabilities.

Products

core 20 redaxo 4 Redaxo CMS Mediapool 1 Redaxo CMS 1 CMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-117532 Public exploit

    REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin

    REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state an…

    redaxo core
  • High 8.3
    CVE-2026-21857 Public exploit

    Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

    REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webroot via path traversal in the Backup addon's file export functionality. The Backup addon does not val…

    redaxo redaxo redaxo/source Packagist