CVE-2026-46399
NoneCVSS
—
EPSS
0.5%
Published
Jun 5, 2026
CISA due date
—
The record
HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this vulnerability to configure malicious Git filter commands and achieve code execution on the HAX CMS server. Version 26.0.0 patches the issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107818 MariaDB server is a community developed fork of MySQL server. CWE-15
- CVE-2026-87987 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CWE-15
- CVE-2026-85217 A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can… CWE-15
- CVE-2026-19592 OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS… CWE-15
- CVE-2026-16708 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive… CWE-15
- CVE-2026-19884 In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source… CWE-15
- CVE-2026-66065 Ouroboros is a local-first runtime for AI coding agents that records their actions and… CWE-15
- CVE-2026-0418 Insufficient configuration management in the listed devices allows authenticated… CWE-15