VULNERABILITY INTELLIGENCE

CVE-2026-45701

EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-01
Last modified2026-07-22

Description

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6.

Weakness classification

  • security-advisories@github.com: CWE-327

Primary references