Read the docs

Redeight

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Redeight records in CISA KEV

No Redeight vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-38718 CVE-2026-53690 · GHSA-722f-j64m-mq4x

SQL Injection in Redeight CMS

Priority MEDIUM 49

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00511 Published 2026-06-30 No fix listed CWE-89
TI-2026-38719 CVE-2026-53691 · GHSA-gxmr-q5p5-p9w5

Remote Code Execution in Redeight CMS

Priority MEDIUM 46

An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00671 Published 2026-06-30 No fix listed CWE-434
TI-2026-38720 CVE-2026-53692 · GHSA-92mj-xr7p-2g9c

Weak hashing algorithm in Redeight CMS

Priority LOW 25

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00112 Published 2026-06-30 No fix listed CWE-328
Open these records in search →