MMagicblack

Products

Exploited and recent CVEs

• CVE-2026-116216 Medium 5.3 MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment 0.3%
• CVE-2026-116215 Low 3.1 MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption 0.2%
• CVE-2026-116214 Critical 9.1 MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code 0.5%
• CVE-2026-111356 High 7.4 MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force 0.4%
• CVE-2026-90788 Medium 4.7 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection 2.2%
• CVE-2026-71232 High 7.2 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE 0.5%
• CVE-2025-10397 Medium 4.7 Magicblack MacCMS API server-side request forgery 0.3%
• CVE-2025-10395 Medium 4.7 Magicblack MacCMS Scheduled Task col_url server-side request forgery 0.3%