Login Request a demo
RE
Product
redaxo
by redaxo · last CVE Sep 23, 2026
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities31In the news0Timeline
Severity mix
Critical 2High 6Medium 19Low 0
Severity
All severities31Critical2High6Medium19Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add redaxo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-64050
7.2
1%
Nov 25
A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating…
Affected: 5.20.0
CVE-2024-46210
7.2
1%
Jan 10
An arbitrary file upload vulnerability in the MediaPool module of Redaxo CMS v5.17.1 allows attackers to execute arbitrary code via uploading a crafted file
Affected: 5.17.1
CVE-2024-46213
7.2
1%
Oct 16
REDAXO CMS v2.11.0 was discovered to contain a remote code execution (RCE) vulnerability
Affected: 2.11.0
CVE-2024-25298
7.2
1%
Feb 17
An issue was discovered in REDAXO version 5.15.1, allows attackers to execute arbitrary code and obtain sensitive information via modules.modules.php
Affected: 5.15.1
CVE-2024-25301
7.2
1%
Feb 14
Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php
Affected: 5.15.1
CVE-2021-39459
7.2
5%
Sep 9
Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module…
Affected: 5.12.1
Showing 6