Cpe:2.3:a:maccms:maccms:10:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amaccmsmaccms10/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 15:43:34 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMacCMS: Authentication bypass in password recovery (CVE-2026-116214)https://feed.craftedsignal.io/briefs/2026-10-maccms-auth-bypass/Mon, 26 Oct 2026 15:43:34 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-maccms-auth-bypass/MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability in the password recovery function that allows unauthenticated attackers to hijack arbitrary user accounts.MacCMS v10 versions prior to 2026.1000.4054 contain a critical vulnerability in the password reset process. The check_msg() function fails to validate the msg_to parameter during password recovery, enabling an attacker to bypass authentication. An attacker can initiate a password recovery request for a target account, intercept the recovery code sent to their own controlled address, and submit that code to the user/findpass_reset endpoint with the victim's email or phone number to change the password and gain unauthorized access.

Impact

Successful exploitation allows unauthenticated attackers to gain full control over any member account, potentially leading to unauthorized data access or administrative account compromise.

Recommendation

  • Patch MacCMS v10 to version 2026.1000.4054 or later immediately.
  • Audit web server logs for suspicious spikes in requests to user/findpass_msg and user/findpass_reset from single source IPs, which may indicate automated account takeover attempts.
]]>criticaladvisory