Skip to content
Threat Feed
Subscribe

Vendor

MacCMS

1 brief RSS
high advisory

Unauthenticated Account Takeover in MacCMS via Password Recovery Rate Limiting Bypass

MacCMS versions v10 through 2026.1000.4056 are vulnerable to an unauthenticated account takeover via brute-force exploitation of the password recovery function.

MacCMS web-application account-takeover vulnerability cve-2026-111356
1t 1c