HA
Product
haxcms-nodejs
9
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 2Low 0
Watch
Add haxcms-nodejs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46511 | 8.7 | Jun 5 | HAXcms: Mass Token Exfiltration and Cross-Tenant Hijack Affected: < 26.0.0 |
| CVE-2026-48527 | 8.7 | May 29 | HaxCMS has a stored Cross-Site Scripting (XSS) bypass in saveNode endpoint Affected: < 26.0.1 |
| CVE-2026-46393 | 7.1 | Jun 5 | HAXcms createSite SSRF Enables Arbitrary File Read Affected: < 26.0.0 |
Showing 3