Vendor

    Redaxo

    49 known vulnerabilities in products by Redaxo, 0 of them actively exploited (CISA KEV).

    Key figures

    49

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Redaxo
    HighCVE-2021-39459

    Redaxo CMS: Remote Code Execution

    		7.2
    CriticalCVE-2018-17831

    Redaxo CMS: SQL Injection

    		9.8
    CriticalCVE-2026-117532

    REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin

    		9.8
    CriticalCVE-2018-18200

    Redaxo CMS: SQL Injection

    		9.8
    HighCVE-2024-25301

    Redaxo CMS: Remote Code Execution

    		7.2
    HighCVE-2025-64050

    Redaxo CMS: Remote Code Execution

    		7.2
    HighCVE-2024-25298

    Redaxo CMS: Information Disclosure

    		7.2
    HighCVE-2024-46213

    Redaxo CMS: Remote Code Execution

    		7.2
    HighCVE-2026-53599

    Redaxo Core: Unrestricted Upload of File with Dangerous Type

    		7.5
    HighCVE-2018-25353

    Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload

    		8.8
    HighCVE-2026-117536

    REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation

    		8.8
    HighCVE-2026-21857

    Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

    		6.5
    HighCVE-2026-116896

    REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables

    		7.5
    MediumCVE-2021-39458

    Redaxo CMS: security vulnerability

    		6.5
    HighCVE-2026-116897

    REDAXO before 5.21.4 Missing Authorization in Version and History Previews

    		6.5
    MediumCVE-2026-116893

    REDAXO core before 5.21.5 Missing Authorization in rex_api_package API

    		6.8
    HighCVE-2026-116899

    REDAXO before 5.21.4 Broken Access Control in Slice Operations

    		6.5
    HighCVE-2026-116898

    REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move

    		7.1
    Not ratedCVE-2006-2845

    Redaxo CMS: File Inclusion

    		—
    Not ratedCVE-2006-2843

    Redaxo CMS: File Inclusion

    		—
    Not ratedCVE-2006-2844

    Redaxo CMS: File Inclusion

    		—
    HighCVE-2018-15850

    Redaxo CMS: Cross-Site Request Forgery (CSRF)

    		8.8
    HighCVE-2024-46210

    Redaxo CMS: Unrestricted File Upload

    		7.2
    MediumCVE-2026-117535

    REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool

    		6.1
    MediumCVE-2026-63000

    REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates

    		6.4

    All vulnerabilities in search

    Products

    Products by Redaxo
    Redaxo CMS310
    Core200