Cpe:2.3:a:maccms:maccms:10:*:*:*:*:*:*:*

MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability in the password recovery function that allows unauthenticated attackers to hijack arbitrary user accounts.