haxcms-nodejs vulnerabilities and fixes

Recent CVEs affecting haxcms-nodejs, with upgrade or downgrade steps. 10 tracked.

Also searched as: haxcms nodejs.

haxcms-nodejs has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 10. Most recent: 2025-07-26. Highest priority: CVE-2025-49141 (score 53/100).

• CVE-2025-54378 HIGH 8.3 UPGRADE UPGRADE HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends
• CVE-2025-54139 MEDIUM 4.3 UPGRADE UPGRADE HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend
• CVE-2025-54137 HIGH 7.3 UPGRADE HAX CMS NodeJS allows users to manage their microsite universe with a NodeJS backend
• CVE-2025-54134 MEDIUM 6.5 UPGRADE HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend
• CVE-2025-54128 MEDIUM 6.1 UPGRADE HAX CMS NodeJs allows users to manage their microsite universe with a NodeJs backend
• CVE-2025-54127 CRITICAL 9.8 UPGRADE HAXcms with nodejs backend allows users to start the server in any HAXsite or HAXcms instance
• CVE-2025-53642 MEDIUM 4.8 UPGRADE UPGRADE haxcms-nodejs and haxcms-php are backends for HAXcms
• CVE-2025-49141 HIGH 8.5 UPGRADE UPGRADE HAX CMS PHP allows users to manage their microsite universe with a PHP backend
• CVE-2025-49139 MEDIUM 5.3 UPGRADE UPGRADE HAX CMS PHP allows users to manage their microsite universe with a PHP backend
• CVE-2025-49137 HIGH 8.5 UPGRADE UPGRADE HAX CMS PHP allows users to manage their microsite universe with a PHP backend

FAQ

How do I fix haxcms-nodejs vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is haxcms-nodejs being exploited right now?

None of the tracked haxcms-nodejs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which haxcms-nodejs CVE should I patch first?

CVE-2025-49141 currently ranks highest (53/100): HAX CMS PHP allows users to manage their microsite universe with a PHP backend.

RSS feed for haxcms-nodejs · ← Back to latest CVEs