Arbitrary file upload in Redeight Cms
CVE-2026-53691
An Unrestricted File Upload vulnerability in Redeight CMS version 1.0 allows authenticated attackers to achieve Remote Code Execution via the POST "/admin/index.php?module=pages&mode=FileAdd" endpoint. The application fails to validate fil…
Vulnerability class: Unrestricted File Upload
Affected products
- Redeight Cms — versions 1.0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)