HAXiam vulnerabilities

1 known vulnerability in HAXiam from Haxtheweb. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  HAXiam: Insertion of Sensitive Information into Log File

  CVE-2026-35185Apr 6, 2026Haxtheweb

  HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to 25.0.0, the /server-status endpoint is publicly accessible and exposes sensitive information including authentication tokens (user_token), user activity, client IP addresses, and ser