CVE-2026-116896
Received Received - Intake

REDAXO Backup Addon Missing Authorization Allowing Table Export

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: VulnCheck

Description
REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] permission to export rex_user, rex_user_session, and other applications' tables. Attackers can obtain plaintext session ids and stay-logged-in keys to take over admin accounts, or password hashes for offline cracking.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-116896
EUVD
EUVD-2026-110792

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
redaxo core 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

REDAXO before 5.21.5 has a missing authorization flaw in the backup addon export feature. Non-admin users with backup[export] permission can export sensitive database tables like rex_user and rex_user_session. This allows attackers to obtain plaintext session IDs and stay-logged-in keys to hijack admin accounts or steal password hashes for offline cracking.

Detection Guidance

Check REDAXO version with: grep -r "REDAXO_VERSION" /path/to/redaxo/core. If version is 5.21.4 or earlier, the system is vulnerable. Review backup addon permissions in the admin panel to confirm non-admin users have backup[export] permission.

Impact Analysis

Attackers could gain admin account access by stealing session IDs or stay-logged-in keys. They might also obtain password hashes to crack passwords offline. This could lead to full system compromise, data theft, or unauthorized actions in the REDAXO application.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive user data, violating GDPR's data protection principles and HIPAA's security requirements. It may result in data breaches, unauthorized disclosures, and non-compliance with access control and integrity requirements.

Mitigation Strategies

Upgrade REDAXO to version 5.21.5 or later immediately. Remove backup[export] permission from non-admin users. Audit exported data for unauthorized access to rex_user, rex_user_passkey, or rex_user_session tables.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-116896. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart