Products: 3
Vulnerabilities: 15
Known Exploited: 0
2
Critical Level Threats
6
High Level Threats
7
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-35185
HAX CMS's public /server-status endpoint exposes authentication tokens, user activity, and client IP addresses
Last Modified: Apr 16, 2026
Published: Apr 06, 2026
CVE-2026-22704
HAXcms Has Stored XSS Vulnerability that May Lead to Account Takeover
Last Modified: Apr 18, 2026
Published: Jan 10, 2026
CVE-2025-54378
HAX CMS Backend Lacks Comprehensive Authorization Checks
Last Modified: Aug 21, 2025
Published: Jul 26, 2025
CVE-2025-54139
HAX CMS' application pages are vulnerable to clickjacking
Last Modified: Aug 22, 2025
Published: Jul 22, 2025
CVE-2025-54137
NodeJS version of the HAX CMS application is distributed with Default Secrets
Last Modified: Aug 22, 2025
Published: Jul 22, 2025
Items Per Page
