Advisories · Technology

haxtheweb issues.

Every CVE that names haxtheweb issues among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-46401 CVE record

CVSS 5.3 Medium

HAX CMS PHP has Insufficient Session Expiration
- haxtheweb issues
- Authentication bypass
Not analysed yet 5 Jun 2026
CVE-2025-54129 CVE record

CVSS 4.3 Medium

HAXiam allows for User Enumeration
- haxtheweb issues
- CWE-204
Not analysed yet 21 Jul 2025
CVE-2025-53642 CVE record

CVSS 4.8 Medium

haxcms-nodejs and haxcms-php Improperly Terminate Sessions
- haxtheweb issues
- Authentication bypass
Not analysed yet 11 Jul 2025
CVE-2025-32028 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

HAX CMS PHP allows Insecure File Upload to Lead to Remote Code Execution
- haxtheweb issues
- Unrestricted file upload
Not analysed yet 8 Apr 2025