https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 19:17:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-116214 <p>MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member&#39;s password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then submit it to user/findpass_reset with the victim&#39;s email or phone to take over the account.</p> <p>MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member&#39;s password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then submit it to user/findpass_reset with the victim&#39;s email or phone to take over the account.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116214 https://db.gcve.eu/vuln/ghsa-x697-8hfh-c2rc <p>MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member&#39;s password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then submit it to user/findpass_reset with the victim&#39;s email or phone to take over the account.</p> <p>MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member&#39;s password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then submit it to user/findpass_reset with the victim&#39;s email or phone to take over the account.</p> https://db.gcve.eu/vuln/ghsa-x697-8hfh-c2rc