Skip to content
OpenAdvisories

Product · haxtheweb

haxcms-php

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-46399

    Authenticated Remote Code Execution via File Overwrite

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this vulnerability to configure malicious Git filter commands an…

    haxtheweb haxcms-php haxcms-nodejs