Vendor

    Magicblack

    8 known vulnerabilities in products by Magicblack, 0 of them actively exploited (CISA KEV).

    Key figures

    8

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Magicblack
    MediumCVE-2026-90788

    magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

    		4.7
    CriticalCVE-2026-116214

    MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code

    also in 1 other product

    		9.1
    CriticalCVE-2026-111356

    MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

    		7.4
    HighCVE-2026-71232

    MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE

    		7.2
    MediumCVE-2026-116216

    MacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass Assignment

    also in 1 other product

    		5.3
    LowCVE-2026-116215

    MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption

    also in 1 other product

    		3.1
    HighCVE-2025-10397

    Magicblack MacCMS API server-side request forgery

    also in 1 other product

    		4.7
    HighCVE-2025-10395

    Magicblack MacCMS Scheduled Task col_url server-side request forgery

    also in 1 other product

    		4.7

    Products

    Products by Magicblack
    MacCMS1050
    Magicblack MacCMS30