Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Haxtheweb
Haxiam
Haxtheweb Haxiam vulnerabilities
haxtheweb
haxiam
HAX CMS's public /server-status endpoint exposes authentication tokens, user activity, and client IP addresses
CVE-2026-35185
8.7
High
April 6, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open