CFNext vulnerabilities

1 known vulnerability in CFNext from PAICNI. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CFNext: Use of a One-Way Hash with a Predictable Salt

  CVE-2026-121450Nov 3, 2026PAICNI

  CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the admin password because the subscription UUID is an MD5 of the password with a fixed public salt. Attackers can brute-force the passw