MA
Vendor
magicblack
8
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116216 New | MA maccms10 magicblack | 5.3 | Oct 26 | MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment |
| CVE-2026-116215 New | MA maccms10 magicblack | 3.1 | Oct 26 | MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption |
| CVE-2026-116214 New | MA maccms10 magicblack | 9.1 | Oct 26 | MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code |
| CVE-2026-111356 | MA MacCMS magicblack | 7.4 | Oct 15 | MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force |
| CVE-2026-90788 | MA MacCMS10 magicblack | 4.7 | Sep 14 | magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection |
| CVE-2026-71232 | MA maccms10 magicblack | 7.2 | Aug 5 | MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE |
| CVE-2025-10397 | MA MacCMS Magicblack | 7.2 | Sep 14 | Magicblack MacCMS API server-side request forgery |
| CVE-2025-10395 | MA MacCMS Magicblack | 7.2 | Sep 14 | Magicblack MacCMS Scheduled Task col_url server-side request forgery |