Magicblack MacCMS

• CVE-2026-111356 High 7.4 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force 0.4%
• CVE-2025-10397 Medium 4.7 Magicblack MacCMS API server-side request forgery 0.3%
• CVE-2025-10395 Medium 4.7 Magicblack MacCMS Scheduled Task col_url server-side request forgery 0.3%