Skip to content
OpenAdvisories

Vendor

magicblack

8 known vulnerabilities.

Products

MacCMS10 5 MacCMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-116214 Public exploit

    MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code

    MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via use…

    magicblack maccmspro MacCMS10 maccms10