Skip to content
OpenAdvisories

Product · magicblack

MacCMS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-111356

    MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

    MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset t…

    magicblack MacCMS