Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #5

Redaxo CMS vulnerability allows unauthorized package management

Original: 🚨 EUVD-2026-110789 📊 Score: 6.1/10 (CVSS v3.1) 📦 Product: core 🏢 Vendor: Redaxo 📅 Updated: 2026-10-27 📝 REDAXO core befo

A medium-severity vulnerability, EUVD-2026-110789, has been documented in the Redaxo content management system. Versions of the Redaxo core before 5.21.5 contain a missing authorization flaw in the rex_api_package API function, allowing non-admin backend users to manage packages with only limited privileges. The issue carries a CVSS v3.1 score of 6.1. Users are advised to update to version 5.21.5 or later to close the gap.

Why now: The vulnerability advisory was just updated, prompting security teams to check whether their Redaxo installations need patching.

RedaxoEUVD-2026-110789rex_api_package

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 4 d ago to 4 d ago.

Evidence

• 🚨 EUVD-2026-110789 📊 Score: 6.1/10 (CVSS v3.1) 📦 Product: core 🏢 Vendor: Redaxo 📅 Updated: 2026-10-27 📝 REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets non-admin backend users manage packages with only a… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3864041