Vulnerability Description
HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this vulnerability to configure malicious Git filter commands and achieve code execution on the HAX CMS server. Version 26.0.0 patches the issue.
Related Weaknesses (CWE)
References
- https://github.com/haxtheweb/issues/security/advisories/GHSA-q759-vxg8-vq5j
- https://github.com/haxtheweb/issues/security/advisories/GHSA-q759-vxg8-vq5j
FAQ
What is CVE-2026-46399?
CVE-2026-46399 is a documented vulnerability. HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this ...
How severe is CVE-2026-46399?
CVSS scoring is not yet available for CVE-2026-46399. Check NVD for updates.
Is there a patch for CVE-2026-46399?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.