CVE-2026-116216Medium· 5.3▾ SunlitMacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id. Attackers can submit anonymous comments…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary mac_comment columns including user_id. Attackers can submit anonymous comments with a crafted user_id parameter to attribute them to any registered member, displaying that member's avatar and impersonating them.
maccms10 <= 2021.1000.2000maccms10 <= 2026.1000.4056Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116214Critical· 9.1MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code
CVE-2026-116215Low· 3.1MacCMS v10 through 2026.1000.4056 Race Condition via Card Redemption
CVE-2026-90788Medium· 4.7A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055
CVE-2026-115933Critical· 9.9Forged signed tokens let any registered user take over other users and organizations
CVE-2026-96378Medium· 4.3Commerce Decoupled Checkout - Moderately critical - Access bypass - SA-CONTRIB-2026-179
CVE-2026-112239High· 7.2Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)