CVE-2026-46395 - HAX CMS Vulnerable to Private Key Disclosure via Broken HMAC Implementation
CVE ID :CVE-2026-46395 Published : June 5, 2026, 7:16 p.m. | 1 hour, 58 minutes ago Description :HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the `hmacBase64()` function in the HAXcms Node.js backend contains two critical cryptographic...