Product
MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability in the password recovery function that allows unauthenticated attackers to hijack arbitrary user accounts.