CVE-2026-53692

MEDIUM

Weak hahshing algorithm in Redeight CMS

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-53692. PoCs published by HermesNA-1.

AI-analyzed exploit summary This repository contains an auto-generated stub module for CVE-2026-53692, describing a cryptographic weakness in Redeight CMS 1.0 where MD5 (unsalted) is used for password storage. The code includes placeholder methods (`check`, `run`) but lacks actual exploit implementation.

Description

Redeight CMS version 1.0 uses the MD5 algorithm without a salt to store user passwords. Because MD5 is a cryptographically broken algorithm and lacks salting, attackers who obtain the password hashes can trivially reverse them using rainbow tables, leading to the exposure of plaintext credentials.

Exploits (1)

github STUB 1 stars
by HermesNA-1 · pythonpoc
https://github.com/HermesNA-1/SnakeSploit/tree/main/data/modules_generated/cve-2026-53692_redeight_cms_version.py

This repository contains an auto-generated stub module for CVE-2026-53692, describing a cryptographic weakness in Redeight CMS 1.0 where MD5 (unsalted) is used for password storage. The code includes placeholder methods (`check`, `run`) but lacks actual exploit implementation.

Classification
Stub 99%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Theoretical
Target: Redeight CMS version 1.0
No auth needed
Prerequisites: Access to password hashes (e.g., via database leak or other vulnerability) · Network connectivity to the target (for the placeholder `check` method)
mistral-large-3 · analyzed Jul 09, 2026 Full analysis →

References (1)

Core 1
Core References
Third Party Advisory third-party-advisory
https://cert.pl/posts/2026/06/CVE-2026-53690

Scores

CVSS v4 5.9
EPSS 0.0008
EPSS Percentile 0.3%
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-328
Status published
Products (1)
Redeight/Redeight CMS 1.0
Published Jun 30, 2026
Tracked Since Jun 30, 2026