Magicblack MacCMS10

• CVE-2026-116216 Medium 5.3 MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment 0.3%
• CVE-2026-116215 Low 3.1 MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption 0.2%
• CVE-2026-116214 Critical 9.1 MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code 0.5%
• CVE-2026-90788 Medium 4.7 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection 2.2%
• CVE-2026-71232 High 7.2 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE 0.5%