CVE-2026-53690: SQL Injection in Redeight CMS

Synopsis

An SQL injection vulnerability exists in Redeight CMS version 1.0, affecting the login endpoint's userEmail parameter. The flaw is reachable over the network with no authentication required, as derived from the CVSS v4.0 vector (AV:N, PR:N, UI:N). Successful exploitation allows a remote attacker to execute arbitrary SQL commands against the underlying database, extracting or tampering with stored data. No fix version has been published; HarborGuard tracks this advisory and will make a patched rebuild available as soon as the upstream maintainer ships one.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable endpoint is exposed over the network; an attacker must be able to reach the target host via HTTP to send a crafted POST request to /admin/index.php.

• AuthenticationNot required

  The injection point is the login form itself, so no account or session token is needed before the attacker can send a malicious payload.

• Victim interactionNot required

  The attack is fully server-side; no user needs to click a link, open a file, or take any action for exploitation to succeed.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special timing, race conditions, or environmental preconditions beyond network access to the login endpoint.

Blast Radius

• A successful attacker reads arbitrary rows from the database, including stored credentials, session tokens, and any personal or customer data the application persists.
• The attacker can modify or delete persisted database records, altering application state, user accounts, or content managed by the CMS.
• Database availability impact is rated low, meaning query disruption or partial denial of database service is possible but not the primary risk.