redaxo has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 6.4 (medium).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.4
- Publish → KEV
- —
- Last 90 days
- 1 prev 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-53599High· 7.5REDAXO is a PHP-based content management system41CVE-2016-20053Medium· 5.3Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticated administrators into visiting malicious pages29
redaxo vulnerabilities
CVEs affecting redaxo, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-53599High· 7.5REDAXO is a PHP-based content management system
REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with media[upload] permission upload a JPEG/…
▾ Twilightredaxo · redaxo/sourceEPSS 0.40%via NVD
CVE-2016-20053Medium· 5.3Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticated administrators into visiting malicious pages
Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticated administrators into visiting malicious pages. Attackers can craft H…
▾ Sunlitredaxo · redaxoEPSS 0.15%via NVD