lukasz-rybak/CVE-2026-21857

PoC

CVE-2026-21857 - Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read

view exploit source poc_in_githubauthor lukasz-rybakpublished 2026-04-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-21857US	medium6.5	0.53% (45th)	Exploit	2026-01-07
REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webroot via path traversal…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.