High CVE-2026-46493 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 fixes the issue. CVSS: 7.5 · CWE: CWE-338 View on NVD

#Sicherheitslücke #Update

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

[High] CVE-2026-46493 – HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions pr...

VERWANDTEARTIKEL

CVE-2026-7654 - Admin Columns <= 7.0.18 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution via Custom Field Meta Value

[High] CVE-2026-11416 – MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclo...

[High] CVE-2026-11424 – A server-side request forgery (SSRF) vulnerability exists in a GraphQL service c...

[Critical] CVE-2026-11429 – A path traversal vulnerability exists in the Git Service component shared by Alt...

[High] CVE-2026-11431 – A path traversal vulnerability exists in the Projects Service download endpoint ...

CVE-2026-11416 - MoviePilot Path Traversal via Cloud Storage Download Handlers