TI-2026-27339 CVE-2026-35185
HAX CMS's public /server-status endpoint exposes authentication tokens, user activity, and client IP addresses
Priority HIGH 77
HAX CMS helps manage microsite universe with PHP or NodeJs backends.
No haxtheweb vulnerabilities are listed in CISA KEV.
2 records in Haxiam · all components
HAX CMS helps manage microsite universe with PHP or NodeJs backends.
HAXiam is a packaging wrapper for HAXcms which allows anyone to spawn their own microsite management platform.