VULNERABILITY INTELLIGENCE

CVE-2026-46493

CVSS score7.5 HIGH
EPSS probability0.29%
CISA KEVNot currently listed
Published2026-06-05
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 fixes the issue.

Weakness classification

  • CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Primary references