CVE-2026-116898 | Redaxo up to 5.21.3 Media Pool Bulk Move improper authorization

October 27, 2026 Yanac

A vulnerability, which was classified as critical, was found in Redaxo up to 5.21.3. Affected by this issue is some unknown functionality of the component Media Pool Bulk Move. Such manipulation leads to improper authorization.

This vulnerability is uniquely identified as CVE-2026-116898. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More