Vulnerabilities in magicblack
8 resultsCVE-2026-90788MEDIUMmagicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injectionEPSS 2.2%CVE-2026-71232HIGHMacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCEEPSS 0.5%CVE-2026-116214CRITICALMacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery CodeEPSS 0.5%CVE-2026-111356CRITICALMacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-ForceEPSS 0.4%CVE-2025-10397MEDIUMMagicblack MacCMS API server-side request forgeryEPSS 0.3%CVE-2025-10395MEDIUMMagicblack MacCMS Scheduled Task col_url server-side request forgeryEPSS 0.3%CVE-2026-116216MEDIUMMacCMS v10 through 2026.1000.4056 Comment Impersonation via user_id Mass AssignmentEPSS 0.3%CVE-2026-116215LOWMacCMS v10 through 2026.1000.4056 Race Condition via Card RedemptionEPSS 0.2%