{"id":"CVE-2026-116898","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-116898","generatedAt":"2026-10-28T01:52:57.316Z","title":"REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category.","description":"REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category can move files from restricted categories into it, then silently replace their contents site-wide.","published":"2026-10-27T11:17:33.000Z","lastModified":"2026-10-27T15:05:24.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":7.1,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-639"],"affected":[],"epss":null,"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unscored. Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-10-27T11:17:33.000Z","detail":{"score":"7.1","severity":"HIGH","publishedAt":"2026-10-27T11:17:32.797Z"},"summary":"New CVE, high severity (CVSS 7.1)."}],"references":[{"url":"https://github.com/redaxo/core/security/advisories/GHSA-j9mx-x52f-48cw","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/redaxo-before-5.21.4-missing-authorization-in-media-pool-bulk-move","source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-116898","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}