SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2026-53690

UNKNOWN · CVSS N/A EPSS 0.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-30 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It may be remotely exploitable. It involves a SQL injection risk.

CVE
CVE-2026-53690
Severity
UNKNOWN
CVSS
N/A
EPSS
0.40%

Original NVD Description

An SQL Injection vulnerability exists in Redeight CMS version 1.0 via the "userEmail" parameter in the POST "/admin/index.php" login endpoint. The application fails to sanitize user input and directly interpolates it into SQL queries without using prepared statements, which allows unauthenticated remote attackers to execute arbitrary SQL commands and extract sensitive database information.