CVE WATCH / VULNERABILITY DETAIL
CVE-2026-117532
CRITICALCVSS 9.8NVD feed
Published 27 October 2026 · tracked since 28 October 2026
Description
REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state and forge tokens for accounts like admin, g
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-117602 HIGH 8.4
- CVE-2026-117603 MEDIUM 4.3
- CVE-2026-117566 MEDIUM 5.3
- CVE-2026-117564 CRITICAL 9.8
- CVE-2026-117558 HIGH 7.8
- CVE-2026-117559 HIGH 7.8
- CVE-2026-117554 MEDIUM 4.3
- CVE-2026-65119 HIGH 8.4
- CVE-2026-117499 LOW 3.7
- CVE-2026-10752 MEDIUM 4.8