Vulnerability in Haxtheweb Issues

CVE-2026-46401

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Versions prior to 26.0.0 suffer from an improper session termination vulnerability where authentication tokens remain valid after user logout. This allows attackers who o…

EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.