CVE-2026-116214 - MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code
CVE ID :CVE-2026-116214 Published : Oct. 26, 2026, 1:08 p.m. | 1 hour, 14 minutes ago Description :MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to....