Skip to content

Vendor

Redeight vulnerabilities

3 published CVES affecting Redeight, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of Redeight alerts

Products

Latest Redeight CVEs

Newest publication first

  1. CVE-2026-53692 Weak hashing algorithm in Redeight CMS

    Published
    MediumCVSS 5.9 EPSS 0.11%

    Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plai...

  2. CVE-2026-53691 Remote Code Execution in Redeight CMS

    Published
    HighCVSS 8.6 EPSS 0.67%

    An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate file extensions and MIME types, permitting t...

  3. CVE-2026-53690 SQL Injection in Redeight CMS

    Published
    CriticalCVSS 9.3 EPSS 0.51%

    An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allow...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.