CO
Product
core
20
CVEs
0
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 1High 4Medium 15Low 0
Watch
Add core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-117536 New | 8.8 | Oct 27 | REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation Affected: before 5.21.3 |
| CVE-2026-116896 New | 7.5 | Oct 27 | REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables Affected: before 5.21.5 |
| CVE-2026-53599 | 7.5 | Jul 31 | Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers Affected: >= 5.18.2, < 5.21.1 |
| CVE-2026-116898 New | 7.1 | Oct 27 | REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move Affected: before 5.21.4 |
Showing 4