CVE ID :CVE-2026-111356 Published : 15 octobre 2026 22:19 | 5ย heures, 30ย minutes ago Description :MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowing a victim's email or phone can request a code and brute-force findpass_reset to overwrite the member's pas
Vulnerability
CVE-2026-111356
MITRE CVE High
Refer to CVE-2026-111356 NVD advisory