CVE-2026-116899

REDAXO versions before 5.21.4 are susceptible to a broken access control vulnerability (CWE-639). This flaw allows authenticated editors to modify slices in unauthorized categories by pairing a permitted article with a foreign slice ID. By abusing the content/edit, delete, and edit functions, as ...