CVE-2025-54137 | haxtheweb haxcms up to 11.0.9 NodeJS Backend default credentials (GHSA-5fpv-5qvh-7cf3)

July 23, 2025 Yanac

A vulnerability was found in haxtheweb haxcms up to 11.0.9. It has been declared as critical. This vulnerability affects unknown code of the component NodeJS Backend. The manipulation leads to use of default credentials.

This vulnerability was named CVE-2025-54137. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More