magicblack vulnerabilities

Products

• maccms10 6
• MacCMS 2

Latest magicblack CVEs

Newest publication first

1. CVE-2026-116216 MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment

   Published 2026-10-26

   Medium·CVSS 6.9

   MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id. Attackers can submit anonymous comments with a crafted user_id parameter to attrib...

2. CVE-2026-116215 MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption

   Published 2026-10-26

   Low·CVSS 2.3

   MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multiple times via the user/buy endpoint. Attackers can send many concurrent flag=card requests that pass the non-locking car...

3. CVE-2026-116214 MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code

   Published 2026-10-26

   Critical·CVSS 9.3

   MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then...

4. CVE-2026-111356 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

   Published 2026-10-15

   Critical·CVSS 9.1

   MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the membe...

5. CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

   Published 2026-09-14

   Medium·CVSS 5.1

   A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manip...

6. CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

   Published 2026-08-05

   High·CVSS 7.2

   MacCMS10's admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function...

7. CVE-2025-10397 Magicblack MacCMS API server-side request forgery

   Published 2025-09-14

   Medium·CVSS 5.1

   A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and...

8. CVE-2025-10395 Magicblack MacCMS Scheduled Task col_url server-side request forgery

   Published 2025-09-14

   Medium·CVSS 5.1

   A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the atta...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.