Known Vulnerabilities for Redaxo Cms by Redaxo
Listed below are 1 of the newest known vulnerabilities associated with "Redaxo Cms" by "Redaxo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63002 json | REDAXO is a PHP-based content management system. Prior to 5.21.2, redaxo/src/addons/mediapool/pages/sync.php inserts filename... | Not Provided | 2026-09-23 | 2026-09-24 |
| CVE-2026-63001 json | REDAXO is a PHP-based content management system. Prior to 5.21.2, the mediaIsInUse() handler in redaxo/src/addons/media_manag... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-63000 json | REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_api_install_package_update in redaxo/src/addons/install... | Not Provided | 2026-09-23 | 2026-09-29 |
| CVE-2026-62998 json | REDAXO is a PHP-based content management system. Prior to 5.21.2, rex_list::getSortColumn() in redaxo/src/core/lib/list.php a... | Not Provided | 2026-09-23 | 2026-09-23 |
| CVE-2026-53599 json | REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/src/ad... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2018-15850 json | An issue was discovered in REDAXO CMS 4.7.2. There is a CSRF vulnerability that can add an administrator account via index.ph... | 8.8 - HIGH | 2018-08-25 | 2018-10-17 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Redaxo | Redaxo Cms | 4.7.2 |