TI-2026-84343 CVE-2026-121450 · GHSA-49q7-xccc-p35m
CFNext Admin Password Recovery via MD5-Derived Subscription UUID
Priority HIGH 69
CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the admin password because the subscription UUID is an MD5 of the password with a fixed public s…