Medium severityGHSA Advisory· Published Jun 1, 2026· Updated Jun 1, 2026

CVE-2026-45701

Description

Sulu is an open-source PHP content management system based on the Symfony framework. Prior to versions 2.6.23 and 3.0.6, the password reset tokenand API key generation uses a weak cryptographical hash algorithm. This issue has been patched in versions 2.6.23 and 3.0.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
sulu/suluPackagist	>= 3.0.0-alpha1, < 3.0.6	3.0.6
sulu/suluPackagist	< 2.6.23	2.6.23

Affected products

Sulu/SuluGHSA
Range: <= 2.6.22

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-7fv8-6pp7-6h85ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-45701ghsaADVISORY
github.com/sulu/sulu/releases/tag/2.6.23nvdWEB
github.com/sulu/sulu/releases/tag/3.0.6nvdWEB
github.com/sulu/sulu/security/advisories/GHSA-7fv8-6pp7-6h85nvdWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000