Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-116896: REDAXO lets low‑privilege users export admin data
CVE-2026-116896 · published 2 days ago
Summary
In REDAXO versions before 5.21.5, the backup feature can export any database table, so users who only have the backup export right can download the tables that store passwords, session IDs and other login details. This could let an attacker steal credentials and take over administrator accounts. Upgrade REDAXO to version 5.21.5 or newer and limit the backup export permission to trusted administrators.
What to do
- Update redaxo core to version 5.21.5 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| redaxo | core | < 5.21.5 |
Original advisory text
REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables
REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] permission to export rex_user, rex_user_session, and other applications' tables. Attackers can obtain plaintext session ids and stay-logged-in keys to take over admin accounts, or password hashes for offline cracking.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/116xxx/CVE-2026-1168... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-116896 Vendor Advisory
- https://github.com/redaxo/core/security/advisories/GHSA-phjc-vx3j-58r3 Vendor Advisory
- https://www.vulncheck.com/advisories/redaxo-before-5.21.5-privilege-escalation-v... Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
9.4
Critical
Type
CWE-862Missing Authorization
Timeline
Published27 Oct 2026
Updated28 Oct 2026
First seen27 Oct 2026
Sources
CVE-2026-116896 · NVD
CVE-2026-116896 · MITRE
CVE-2026-116896 · OSV
GHSA-phjc-vx3j-58r3 · GHSA
Track software like this
Free during beta