CVE-2026-53692 MEDIUM

CVE-2026-53692: Weak hahshing algorithm in Redeight CMS

Vendor Redeight
Product Redeight CMS
Weakness CWE-261
Published June 30, 2026
Last update June 30, 2026

CVSS base score

5.9/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials.

Key dates

02Disclosure timeline

June 30, 2026 CVE published