CVE-2026-21857

🗓️ 07 Jan 2026 22:32:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 15 Views🌐 WEB

CVE-2026-21857: REDAXO prior to 5.20.2 lets authenticated backup users read files via path traversal in Backup export.

Reporter	Title	Published	Views	Family All 15
GithubExploit	Exploit for Path Traversal in Redaxo	11 Apr 202619:14	–	githubexploit
Circl	CVE-2026-21857	5 Jan 202618:27	–	circl
CNNVD	REDAXO 安全漏洞	7 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-21857 Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read	7 Jan 202622:32	–	cvelist
EUVD	EUVD-2026-0817	7 Jan 202622:32	–	euvd
Github Security Blog	Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read	5 Jan 202620:02	–	github
NVD	CVE-2026-21857	7 Jan 202623:15	–	nvd
OSV	CVE-2026-21857 Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read	7 Jan 202622:32	–	osv
OSV	GHSA-824X-88XG-CWRV Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read	5 Jan 202620:02	–	osv
Packet Storm	📄 Redaxo 5.20.1 Path Traversal	13 Apr 202600:00	–	packetstorm

NVD

Vulners

Node

redaxo redaxoRange<5.20.2

[
  {
    "vendor": "redaxo",
    "product": "redaxo",
    "versions": [
      {
        "version": "< 5.20.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/redaxo/redaxo/releases/tag/5.20.2
github	www.github.com/redaxo/redaxo/security/advisories/GHSA-824x-88xg-cwrv

Parameter	Position	Path	Description	CWE
EXPDIR	request body	redaxo/src/addons/backup/pages/export.php	Path traversal via EXPDIR in Backup addon export; authenticated backup users can read arbitrary files within webroot by manipulating EXPDIR to include ../ sequences or absolute paths.	CWE-22, CWE-24

17 Jun 2026 10:19Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.16.5

CVSS 48.3

EPSS0.00493

SSVC