Skip to content
Multiple Privilege Escalation Vulnerabilities in REDAXO Discovered

Multiple Privilege Escalation Vulnerabilities in REDAXO Discovered

First seen 28 Oct 2026, 02:21 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 04:46 UTC
  • •Two critical vulnerabilities in REDAXO before versions 5.21.5 and 5.21.3.
  • •Privilege escalation can occur via backup export and CSRF token bypass.
  • •Immediate patching is recommended to prevent unauthorized access.

Two vulnerabilities have been identified in REDAXO versions prior to 5.21.5 and 5.21.3. The first vulnerability allows privilege escalation via backup export of authentication tables (CWE-862), while the second enables CSRF token bypass leading to privilege escalation. These vulnerabilities affect users of REDAXO, a content management system, and could potentially allow unauthorized access to sensitive data or administrative functions. The vulnerabilities were disclosed on 2026-10-28, and users are urged to upgrade to the latest versions to mitigate risks. There are no indications of reported at this time, but the potential for exploitation exists. Users should prioritize patching their installations to the latest versions as soon as possible.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-28
Vulnerabilities disclosed
REDAXO vulnerabilities allowing privilege escalation were disclosed, affecting versions before 5.21.5 and 5.21.3.
VulnCheck
2026-10-28
Advisory published
VulnCheck published advisories for both vulnerabilities, urging users to upgrade to the latest versions.
VulnCheck

More articles in this cluster (2)

Extracted Entities (4)

1 / 4

Common questions

Which versions of REDAXO are affected?
REDAXO versions prior to 5.21.5 and 5.21.3 are affected by these vulnerabilities.
Are these vulnerabilities actively exploited?
No active exploitation has been reported at this time, but the vulnerabilities pose a risk.
What should users do to protect themselves?
Users should upgrade to the latest versions of REDAXO to mitigate the vulnerabilities.