CVE-2026-117536 | Redaxo up to 5.21.2 User Administration Page users/users FUNC_UPDATE save cross-site request forgery

October 27, 2026 Yanac

A vulnerability marked as problematic has been reported in Redaxo up to 5.21.2. Affected is the function FUNC_UPDATE of the file users/users of the component User Administration Page. The manipulation of the argument Save leads to cross-site request forgery.

This vulnerability is documented as CVE-2026-117536. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More