https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T05:23:05.284357+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111356 fkie_cve-2026-111356 2026-10-16T05:23:05.310791+00:00

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's password.

 https://db.gcve.eu/vuln/ghsa-x2wf-9f7g-pjxv GHSA-x2wf-9f7g-pjxv 2026-10-16T05:23:05.310889+00:00

MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's password.