Skip to content
OpenAdvisories

Vendor

magicblack

8 known vulnerabilities.

Products

MacCMS10 5 MacCMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-116215

    MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption

    MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pas…

    magicblack maccmspro MacCMS10 maccms10