Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 fixes the issue.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-06-06 | 2 | Disclosure1Patch1 |
| 2026-07-30 | 1 | Patch1 |
🚨 HIGH severity CVE-2026-46493 (CVSS 7.5) HAX CMS <26.0.1 uses weak `uniqid` for salt generation, enabling potential credential compromise. ✅ Update to 26.0.1 immediately #CVE #Vulnerability #PatchNow https://t.co/PhkA3ZdOSx
Post summary
HAX CMS users should immediately update to version 26.0.1 to remediate CVE‑2026‑46493 caused by weak salt generation.
CVE-2026-46493 HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.1 use `uniqid` for generating salts, which is unsuitable. Version 26.0.1 f… https://www.cve.org/CVERecord?id=CVE-2026-46493
Post summary
CVE‑2026‑46493 in HAX CMS stems from weak salt generation using `uniqid`; upgrading to version 26.0.1 applies the necessary fix.
CVE-2026-46493 Weak Salt Generation in HAX CMS Versions Prior to 26.0.1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-46493
Post summary
The post announces a new CVE (CVE-2026-46493) describing weak salt generation in pre‑26.0.1 HAX CMS, linking to a vulnerability database, but offers no exploit code, active‑use data or remediation guidance.