CVE-2026-46493 – haxtheweb/haxcms-php uses insecure method for generating salt

CVE ID :CVE-2026-46493

Published : June 5, 2026, 8:17 p.m. | 15 minutes ago

Description :HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 fixes the issue.

Severity: 7.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…