Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Redeight Clear all filters
TI-2026-38720 CVE-2026-53692 · GHSA-92mj-xr7p-2g9c

Weak hashing algorithm in Redeight CMS

Priority LOW 25

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00112 Published 2026-06-30 No fix listed CWE-328
TI-2026-38719 CVE-2026-53691 · GHSA-gxmr-q5p5-p9w5

Remote Code Execution in Redeight CMS

Priority MEDIUM 46

An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00671 Published 2026-06-30 No fix listed CWE-434
TI-2026-38718 CVE-2026-53690 · GHSA-722f-j64m-mq4x

SQL Injection in Redeight CMS

Priority MEDIUM 49

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00511 Published 2026-06-30 No fix listed CWE-89