Redeight vulnerabilities
We track 2 vulnerabilities in Redeight products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 30, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Redeight vulnerabilities
- 8.6 High severity
Redeight CMS: Unrestricted Upload of File with Dangerous Type
An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate file extensions and MIME
- 9.3 Critical severity
Redeight CMS: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared sta