CVE-2026-90788

Name of the Vulnerable Software and Affected Versions magicblack MacCMS10 version 2026.1000.4055

Description A flaw in the Template Handler component allows remote attackers to perform OS command injection. This occurs through the manipulation of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html. OS command injection is a technique where an attacker executes arbitrary operating system commands on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.