VulnSocial

CVE-2026-46390Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version 26.0.0, the gitlist plugin is exposed to unauthenticated users, allowing unauthenticated browsing of git repositories and git history. Version 26.0.0 patches the issue.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-06: 2Technical Details · 2026-06-06: 106-06
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-46390 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version 26.0.0, the gitlist plugin is exposed to unauthent… https://www.cve.org/CVERecord?id=CVE-2026-46390 ----- Traducción: CVE-2026-46390 HAX… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑46390, detailing unauthenticated exposure in the gitlist plugin of HAX CMS across specific version ranges, without mentioning proofs of concept, exploits, active use, or remediation.

    0000021
    79 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-46390 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 2.0.0 and prior to version 26.0.0, the gitlist plugin is exposed to unauthent… https://www.cve.org/CVERecord?id=CVE-2026-46390

    Post summary

    CVE-2026-46390 indicates potential unauthenticated access to the gitlist plugin in HAX CMS (v2.0.0–26.0.0), but the provided excerpt lacks details on exploitation, mitigation or severity.

    00000202
    57.6K followersView on X

Explore more

Back to dashboard