Magicblack Maccms10
5 CVEs affecting Magicblack Maccms10. Latest disclosed: 2026-10-26. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-116214 | Critical | 9.1 | 2026-10-26 | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because c… |
CVE-2026-71232 | High | 7.2 | 2026-08-05 | MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the… |
CVE-2026-116216 | Medium | 5.3 | 2026-10-26 | MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary… |
CVE-2026-90788 | Medium | 4.7 | 2026-09-14 | A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/a… |
CVE-2026-116215 | Low | 3.1 | 2026-10-26 | MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card mult… |