Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 11:04:31 +0000 CVE-2026-116896 — REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables https://db.gcve.eu/vuln/cve-2026-116896 <p><strong>Affected:</strong> redaxo core</p> <p>REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] permission to export rex_user, rex_user_session, and other applications&#39; tables. Attackers can obtain plaintext session ids and stay-logged-in keys to take over admin accounts, or password hashes for offline cracking.</p> <p><strong>Affected:</strong> redaxo core</p> <p>REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] permission to export rex_user, rex_user_session, and other applications&#39; tables. Attackers can obtain plaintext session ids and stay-logged-in keys to take over admin accounts, or password hashes for offline cracking.</p> https://db.gcve.eu/vuln/cve-2026-116896