CVE-2026-75465

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...

CVE-2026-75465

The /api.php/user/get_list endpoint in Maccms v10 (version v2026.1000.4055) suffers from an Incorrect Access Control flaw: it performs no authentication or authorization checks. An unauthenticated remote attacker can issue a crafted HTTP GET request using limit and offset parameters to paginate t...

CVE-2026-75465

The /api.php/user/getlist endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks. An unauthenticated remote attacker can send a crafted HTTP GET request with limit and offset parameters t...