CVE-2026-116895 | REDAXO up to 5.21.4 CSRF Token index.php safemode cross-site request forgery

October 27, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in REDAXO up to 5.21.4. Affected by this vulnerability is an unknown functionality of the file index.php of the component CSRF Token. This manipulation of the argument safemode causes cross-site request forgery.

This vulnerability is handled as CVE-2026-116895. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More