CVE-2026-121450

CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the admin password because the subscription UUID is an MD5 of the password with a fixed public salt. Attackers can brute-force the password offline without rate limiting, lo...

CVE-2026-121450 CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID

CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the admin password because the subscription UUID is an MD5 of the password with a fixed public salt. Attackers can brute-force the password offline without rate limiting, lo...

CVE-2026-121450

Versions of CFNext prior to 3.1.0 are vulnerable to an admin password recovery due to a weak cryptographic derivation. The application generates subscription UUIDs by applying an MD5 hash to the password using a fixed public salt. This allows individuals with a subscription link to perform offlin...

CVE-2026-121450: PAICNI CFNext: CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to…

CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to recover the admin password because the subscription UUID is an MD5 of the password with a fixed public salt. Attackers can brute-force the password offline without rate limiting, lo...