https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:03:43.105761+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-46390 CVE-2026-46390 — HAX CMS has Unauthenticated Git Access via User-Controlled Key 2026-10-08T16:03:43.121214+00:00

Affected: haxtheweb haxcms-php

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version 26.0.0, the gitlist plugin is exposed to unauthenticated users, allowing unauthenticated browsing of git repositories and git history. Version 26.0.0 patches the issue.