Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #6

Redaxo CMS security flaw lets sessions stay active

Original: 🚨 EUVD-2026-110790 📊 Score: 2.3/10 (CVSS v3.1) 📦 Product: core 🏢 Vendor: Redaxo 📅 Updated: 2026-10-27 📝 REDAXO before 5.

A new vulnerability entry, EUVD-2026-110790, documents an insufficient session expiration issue in the core of the Redaxo CMS. Versions before 5.21.5 allow attackers to keep access to an account by maintaining an existing session after it should have expired. The flaw carries a low CVSS v3.1 severity score of 2.3 out of 10, and the advisory entry was updated on 27 October 2026.

Why now: A new advisory was published for a flaw affecting Redaxo sites that have not updated to version 5.21.5

RedaxoEUVD-2026-110790ENISA

Open on mastodon →

Evidence

• 🚨 EUVD-2026-110790 📊 Score: 2.3/10 (CVSS v3.1) 📦 Product: core 🏢 Vendor: Redaxo 📅 Updated: 2026-10-27 📝 REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3864042