Redeight CMS vulnerabilities

2 known vulnerabilities in Redeight CMS from Redeight. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Redeight CMS: Unrestricted Upload of File with Dangerous Type

  CVE-2026-53691Jun 30, 2026Redeight

  An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate file extensions and MIME

• 9.3 Critical severity

  Redeight CMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-53690Jun 30, 2026Redeight

  An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared sta