Magicblack · Maccms10 · CVE-2026-90788
**Name of the Vulnerable Software and Affected Versions**
magicblack MacCMS10 version 2026.1000.4055
**Description**
A flaw in the Template Handler component allows remote attackers to perform OS command injection. This occurs through the manipulation of the file `/admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html`. OS command injection is a technique where an attacker executes arbitrary operating system commands on the server.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.