search
rex_api_package
Trends
- 1Redaxo CMS vulnerability allows unauthorized package managementโผ๐จ EUVD-2026-110789 ๐ Score: 6.1/10 (CVSS v3.1) ๐ฆ Product: core ๐ข Vendor: Redaxo ๐ Updated: 2026-10-27 ๐ REDAXO core befo
A medium-severity vulnerability, EUVD-2026-110789, has been documented in the Redaxo content management system. Versions of the Redaxo core before 5.21.5 contain a missing authorization flaw in the rex_api_package API function, allowing non-admin backend users to manage packages with only limited privileges. The issue carries a CVSS v3.1 score of 6.1. Users are advised to update to version 5.21.5 or later to close the gap.