REDAXO Core (< 5.21.4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/redaxo-core--5.21.4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 11:46:05 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgREDAXO Core: Authentication bypass vulnerability (CVE-2026-117532)https://feed.craftedsignal.io/briefs/2026-10-redaxo-auth-bypass/Tue, 27 Oct 2026 11:46:05 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-redaxo-auth-bypass/REDAXO core versions 5.3.0 through 5.21.3 contain an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge administrative login tokens and achieve code execution.REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin. The vulnerability allows unauthenticated attackers to manipulate the session-tied secret into a predictable state, facilitating the forgery of administrative login tokens. Successful exploitation grants attackers unauthorized backend access and the ability to achieve code execution.

Impact

Successful exploitation results in full unauthorized backend access and subsequent code execution.

Recommendation

  • Upgrade to REDAXO version 5.21.4 or later immediately to patch CVE-2026-117532.
  • Audit web server access logs for anomalous requests directed at the 'structure/history' plugin endpoint that result in successful logins.
  • Monitor for unexpected administrative logins originating from unfamiliar IP addresses.
]]>criticaladvisoryvulnerabilityauthentication-bypasswebserver