Skip to content
Threat Feed
Subscribe

Vendor

CFNext

1 brief RSS
high advisory

CFNext: Weak cryptographic derivation in subscription link (CVE-2026-121450)

CFNext versions before 3.1.0 utilize a weak MD5-based cryptographic derivation for subscription UUIDs, enabling offline brute-force attacks to recover administrative passwords and exfiltrate stored proxy and API credentials.

CFNext cve-2026-121450 cryptography authentication
2t 1c