CVE-2026-116216 | maccmspro MacCMS up to 2026.1000.4056 Comment index Comment::saveData user_id dynamically-determined object attributes

October 26, 2026 Yanac

A vulnerability labeled as problematic has been found in maccmspro MacCMS up to 2026.1000.4056. Affected is the function index Comment::saveData of the component Comment. Executing a manipulation of the argument user_id can lead to dynamically-determined object attributes.

This vulnerability is handled as CVE-2026-116216. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More