https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:31:34 +0000 https://db.gcve.eu/vuln/cve-2026-111356 <p><strong>Affected:</strong> magicblack MacCMS</p> <p>MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim&#39;s email or phone can request a code and brute-force findpass_reset to overwrite the member&#39;s password.</p> <p><strong>Affected:</strong> magicblack MacCMS</p> <p>MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim&#39;s email or phone can request a code and brute-force findpass_reset to overwrite the member&#39;s password.</p> https://db.gcve.eu/vuln/cve-2026-111356