Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker sends a specially crafted site creation request to the createSite endpoint. A single request is sufficient to take the entire application offline, requiring a manual server restart to restore service. Version 26.0.0 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-46357 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, the HAX CMS NodeJS application crashes when an authenticated attacker se… https://www.cve.org/CVERecord?id=CVE-2026-46357
Post summary
The CVE-2026-46357 vulnerability causes a NodeJS application crash for authenticated attackers and is mitigated by updating to version 26.0.0.
CVE-2026-46357 Denial of Service in HAX CMS NodeJS Application Prior to ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46357 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
A Denial of Service vulnerability (CVE-2026-46357) affecting HAX CMS's NodeJS application is disclosed with a link to vulnerability details, but no PoC, exploit, or patch information is provided.