Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Maccmspro CVE-2026-116216
MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that allows unauthenticated attackers to set arbitrary m
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Maccmspro CVE-2026-116215
MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated members to redeem one recharge card multi
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Maccmspro CVE-2026-116214
MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because ch
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit