Skip to content
OpenAdvisories

Vendor

PAICNI

1 known vulnerabilities.

Products

CFNext 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-121450

    CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID

    CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the admin password because the subscription UUID is an MD5 of the password with a fixed public salt. Attackers can brute-force the pass…

    PAICNI CFNext