CVE-2026-46493

Affected software : HAX CMS running PHP or Node.js backends. Vulnerability : older releases (before 26.0.1) use PHP’s uniqid to generate salts, which is inappropriate for secure salt generation. Root cause : insecure randomness source in salt generation. Impact : described risk is consistent with...