Priority HIGH 74
MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts.
magicblack
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
magicblack records in CISA KEVNo magicblack vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-61695 CVE-2026-90788 · GHSA-ffxm-fmch-m6mq
magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
Priority MEDIUM 56
A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055.
TI-2026-80388 CVE-2026-116214 · GHSA-x697-8hfh-c2rc
Password recovery flaw in MacCMS v10 allows account takeover
Priority MEDIUM 48
MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to.
TI-2026-80390 CVE-2026-116216 · GHSA-9f7c-9m42-3x6j
Mass assignment in MacCMS lets anonymous comments impersonate users
Priority LOW 36
MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id.
TI-2026-49903 CVE-2026-71232 · GHSA-cv48-22qx-mpmx
MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE
Priority LOW 34
MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_…
TI-2026-80389 CVE-2026-116215 · GHSA-m463-2mww-7vjr
Race condition in MacCMS lets members reuse recharge cards
Priority LOW 11
MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint.