Redaxo

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 30
    Known Exploited: 0
    2
    Critical Level Threats
    12
    High Level Threats
    15
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-53599

    Redaxo has a Mediapool isAllowedExtension bypass via multi-segment filename that leads to authenticated RCE on Apache mod_php multi-extension handlers

    Last Modified: Aug 02, 2026
    Published: Jul 31, 2026

    CVE-2018-25353

    Redaxo CMS Mediapool Addon 5.5.1 Arbitrary File Upload

    Last Modified: May 26, 2026
    Published: May 23, 2026

    CVE-2016-20053

    Redaxo CMS 5.2 Cross-Site Request Forgery via users endpoint

    Last Modified: Apr 15, 2026
    Published: Apr 04, 2026

    CVE-2026-21857

    Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

    Last Modified: Apr 18, 2026
    Published: Jan 07, 2026

    CVE-2025-66026

    REDAXO is Vulnerable to Reflected XSS in Mediapool Info Banner via args[types]

    Last Modified: Dec 03, 2025
    Published: Nov 26, 2025
    Items Per Page