[Critical] CVE-2026-46395 – HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to ve...
Critical CVE-2026-46395 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` function in the HAXcms Node.js backend contains two critical cryptographic implementation errors that together allow any unauthenticated attacker to extract the...