CVE-2026-53691highCWE-434

CVE-2026-53691: falha de alta gravidade em Redeight CMS

Remote Code Execution in Redeight CMS

Publicada em

Seguir esta CVE+ Monitorar Redeight CMS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.7%
An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate file extensions and MIME types, permitting the upload of arbitrary PHP scripts to the publicly accessible "/uploads/files/" directory where they can be executed directly by the web server.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
Produtos afetados
Redeight · Redeight CMS
CVEs relacionadas — Redeight CMS

No mesmo produto, das mais perigosas para as menos.

CVE-2026-53690CRITICALSQL Injection in Redeight CMSEPSS 0.5%CVE-2026-53692MEDIUMWeak hashing algorithm in Redeight CMSEPSS 0.1%