Skip to content
Threat Feed
Subscribe

Product

CFNext (< 3.1.0)

1 brief RSS
high advisory

CFNext: Weak cryptographic derivation in subscription link (CVE-2026-121450)

CFNext versions before 3.1.0 utilize a weak MD5-based cryptographic derivation for subscription UUIDs, enabling offline brute-force attacks to recover administrative passwords and exfiltrate stored proxy and API credentials.

CFNext cve-2026-121450 cryptography authentication
2t 1c