Which versions of Redeight CMS are affected by CVE-2026-53690?

Redeight CMS 1.0 contains a critical SQL injection vulnerability allowing unauthenticated attackers to extract sensitive database contents and administrative credentials without user interaction.

How to fix or mitigate CVE-2026-53690?

24 hours: Identify all systems running Redeight CMS 1.0; restrict network access to /admin/index.php to trusted IP ranges only, or take the application offline. Contact Redeight vendor support for patch availability and expected release timeline. 7 days: Deploy Web Application Firewall rules to block SQL injection patterns in the userEmail POST parameter; review database audit logs from the past 30 days for suspicious queries or unauthorized access attempts. 30 days: Apply vendor-released patch to Redeight CMS immediately upon availability and verify the userEmail parameter no longer accepts SQL injection payloads; if no patch timeline confirmed by day 30, initiate migration to alternative CMS platform.

Redeight CMS CVE-2026-53690

Q: What is the CVSS score of CVE-2026-53690?

CVE-2026-53690 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

EUVD-2026-40292 CRITICAL

SQL Injection (CWE-89)

2026-06-30 CERT-PL

GHSA-722f-j64m-mq4x

PHP SQLi Redeight Cms Redeight

9.3

CVSS 4.0 · Vendor: CERT-PL

Severity by source

Vendor (CERT-PL) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.4 CRITICAL

Unauthenticated network-reachable login-endpoint SQLi (AV:N/AC:L/PR:N/UI:N) yields full DB read and tampering (C:H/I:H) with only minor availability impact (A:L).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (CERT-PL).

CVSS VectorVendor: CERT-PL

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 30, 2026 - 12:15 vuln.today

DescriptionCVE.org

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.

Articles & Coverage 1

News Critical SQL Injection in Redeight CMS 1.0 - CVE-2026-53690 Jun 30, 2026

AnalysisAI

SQL injection in Redeight CMS 1.0 lets unauthenticated remote attackers extract sensitive database contents by injecting through the 'userEmail' POST parameter of the /admin/index.php login endpoint. Because user input is interpolated directly into SQL without prepared statements, an attacker needs no credentials and no user interaction to read or manipulate backend data, including admin authentication material. The flaw was reported by CERT-PL and carries a CVSS 4.0 base score of 9.3 (Critical); no public exploit identified at time of analysis.

Technical ContextAI

The vulnerability is a classic CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) flaw in a PHP-based web content management system. The affected component is the administrative login handler (POST /admin/index.php), where the 'userEmail' field is concatenated into a SQL query string rather than bound via a parameterized/prepared statement. CPE cpe:2.3:a:redeight:redeight_cms:*:*:*:*:*:*:*:* identifies the affected product as Redeight CMS by vendor Redeight; only version 1.0 is named in the description. Because the injection occurs at the login query - typically a SELECT against a users/credentials table - an attacker can subvert the authentication logic and use UNION/boolean/time-based techniques to enumerate the schema and exfiltrate data. The 'PHP' and 'SQLi' tags reinforce that this is a server-side injection in dynamically generated SQL.

RemediationAI

No vendor-released patch identified at time of analysis, and no fix version is present in the provided data, so do not assume a specific patched release exists - verify directly via the CERT-PL advisory at https://cert.pl/posts/2026/06/CVE-2026-53690 and the Redeight vendor. As an immediate compensating control, restrict network access to /admin/index.php (for example, place the admin interface behind a VPN or IP allowlist, or block external access to the /admin/ path at the reverse proxy/WAF), accepting the trade-off that legitimate remote administrators must then connect through the restricted path. Deploy a WAF rule to filter SQL metacharacters on the 'userEmail' parameter as a stopgap, recognizing WAF signatures can be bypassed and may break valid email inputs containing special characters. The durable fix is a code change to use parameterized/prepared statements (e.g., PDO bound parameters) for the login query and to validate the email format server-side; if you control or can rebuild the source, apply that before re-exposing the admin endpoint.