Advisories · Technology

magicblack maccms10.

Every CVE that names magicblack maccms10 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116216 CVE record

CVSS 6.9 Medium

MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment
- maccmspro maccms10
- magicblack maccms10
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2026-116215 CVE record

CVSS 2.3 Low

MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption
- maccmspro maccms10
- magicblack maccms10
- Race condition
Not analysed yet 26 Oct 2026
CVE-2026-116214 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code
- maccmspro maccms10
- magicblack maccms10
- CWE-640
Not analysed yet 26 Oct 2026
CVE-2026-90788 CVE record

CVSS 5.1 Medium

magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
- magicblack MacCMS10
- Command injection
Not analysed yet 14 Sept 2026
CVE-2026-71232 CVE record

CVSS 7.2 High

MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE
- magicblack maccms10
- Code injection
Not analysed yet 5 Aug 2026