VYPR

Haxcms

by Aimeos

CVEs (1)

  • CVE-2026-46394HigJun 5, 2026
    risk 0.50cvss epss 0.01

    HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an OS command injection vulnerability exists in the Git.php library of the HAXcms PHP backend. The application constructs shell command strings using unsanitized input and executes them…