REDAXO (< 5.21.3) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/redaxo--5.21.3/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 11:46:51 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgREDAXO: Authorization bypass in backup addon (CVE-2026-116896)https://feed.craftedsignal.io/briefs/2026-10-redaxo-auth-bypass-a96c1342/Tue, 27 Oct 2026 11:46:51 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-redaxo-auth-bypass-a96c1342/REDAXO versions prior to 5.21.5 contain a missing authorization flaw in the backup addon that allows unauthorized export of sensitive database tables.REDAXO versions before 5.21.5 contain a missing authorization vulnerability in the backup addon. Users possessing the 'backup[export]' permission can export arbitrary database tables, including 'rex_user' and 'rex_user_session', which contain sensitive credentials such as plaintext session IDs, persistent login keys, and password hashes. This allows attackers to perform account takeover or offline password cracking.

Impact

Unauthorized access to sensitive database tables allows non-administrative users to extract credentials and session data, facilitating full administrative account takeover.

Recommendation

  • Upgrade REDAXO to version 5.21.5 or later immediately.
  • Review access control lists and revoke the 'backup[export]' permission from any user accounts that do not strictly require it for operational duties.
  • Audit database export logs for unusual activity or unauthorized file access attempts.
]]>highadvisory