Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:15:45 +0000 CVE-2026-46399 — Authenticated Remote Code Execution via File Overwrite https://cve.radiocsirt.org/vuln/cve-2026-46399 <p><strong>Affected:</strong> haxtheweb haxcms-nodejs, haxtheweb haxcms-php</p> <p>HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this vulnerability to configure malicious Git filter commands and achieve code execution on the HAX CMS server. Version 26.0.0 patches the issue.</p> <p><strong>Affected:</strong> haxtheweb haxcms-nodejs, haxtheweb haxcms-php</p> <p>HAX CMS helps manage microsite universe with PHP or NodeJs backends. The PHP version of HAX CMS prior to version 26.0.0 has an authenticated file overwrite vulnerability. An attacker can exploit this vulnerability to configure malicious Git filter commands and achieve code execution on the HAX CMS server. Version 26.0.0 patches the issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-46399