CVE-2026-53692 — Weak hashing algorithm in Redeight CMS

CVE-2026-53692

Weak hashing algorithm in Redeight CMS PUBLISHED

Description (CNA)

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials.

Affected (CNA)

Vendor / product	Versions
Redeight / Redeight CMS	affected 1.0

CWE

CWE-328

References

https://cert.pl/posts/2026/06/CVE-2026-53690

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.