2 matches found
CVE-2026-75465: Improper Access Control
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
7.5CVSS5.9AI score0.00746EPSS
SaveExploits0References2
CVE-2026-75465
The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...
8.7CVSS5.9AI score0.00746EPSS
SaveExploits0References4
20