Vulnerability in Redeight Cms
CVE-2026-53692
Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials.
EPSS: 0.001 (0.3th percentile) — read the EPSS interpretation.
Affected products
- Redeight Cms — versions 1.0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)