Skip to content
OpenAdvisories

Product · haxtheweb

haxcms-php

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2026-46394 Public exploit

    HAX CMS Vulnerable to Command Injection using Git.php

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an OS command injection vulnerability exists in the Git.php library of the HAXcms PHP backend. The application constructs shell command strings using unsanitized inp…

    haxtheweb haxcms-php