Magicblack vulnerabilities
8 published CVEs name Magicblack among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116216
MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment
maccmspro · maccms10
Medium6.9 - CVE-2026-116215
MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption
maccmspro · maccms10
Low2.3 - CVE-2026-116214
MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code
maccmspro · maccms10
Critical9.3 - CVE-2026-111356
MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force
magicblack · MacCMS
Critical9.1 - CVE-2026-90788
magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection
magicblack · MacCMS10
Medium5.1 - CVE-2026-71232
MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE
magicblack · maccms10
High7.2 - CVE-2025-10397
Magicblack MacCMS API server-side request forgery
Magicblack · MacCMS
Medium5.1 - CVE-2025-10395
Magicblack MacCMS Scheduled Task col_url server-side request forgery
Magicblack · MacCMS
Medium5.1