{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3amaccmsmaccms10/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:maccms:maccms:10:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-116214"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["MacCMS (v10 \u003c 2026.1000.4054)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["MacCMS"],"content_html":"\u003cp\u003eMacCMS v10 versions prior to 2026.1000.4054 contain a critical vulnerability in the password reset process. The \u003ccode\u003echeck_msg()\u003c/code\u003e function fails to validate the \u003ccode\u003emsg_to\u003c/code\u003e parameter during password recovery, enabling an attacker to bypass authentication. An attacker can initiate a password recovery request for a target account, intercept the recovery code sent to their own controlled address, and submit that code to the \u003ccode\u003euser/findpass_reset\u003c/code\u003e endpoint with the victim's email or phone number to change the password and gain unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to gain full control over any member account, potentially leading to unauthorized data access or administrative account compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch MacCMS v10 to version 2026.1000.4054 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit web server logs for suspicious spikes in requests to \u003ccode\u003euser/findpass_msg\u003c/code\u003e and \u003ccode\u003euser/findpass_reset\u003c/code\u003e from single source IPs, which may indicate automated account takeover attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-26T15:43:34Z","date_published":"2026-10-26T15:43:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-maccms-auth-bypass/","summary":"MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability in the password recovery function that allows unauthenticated attackers to hijack arbitrary user accounts.","title":"MacCMS: Authentication bypass in password recovery (CVE-2026-116214)","url":"https://feed.craftedsignal.io/briefs/2026-10-maccms-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:maccms:maccms:10:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}