CVE-2026-15516

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-15516

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15516.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-15516

Published

2026-07-13T00:15:08.047Z

Modified

2026-07-16T03:30:51.578568529Z

Severity

2.9 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

MacCMS Pro Installation Index.php step5 authorization

Details

A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of the file application/install/controller/Index.php of the component Installation Module. The manipulation results in authorization bypass. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used. Upgrading to version 2022.1000.3025 is recommended to address this issue. Upgrading the affected component is recommended.

Database specific

{
    "cwe_ids": [
        "CWE-285",
        "CWE-639"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/15xxx/CVE-2026-15516.json",
    "cna_assigner": "VulDB"
}

References

Affected packages

Git / github.com/magicblack/maccms10

Affected ranges

Type

GIT

Repo

https://github.com/magicblack/maccms10

Events

Introduced

47f67e012f8dea1280ddcbaaebd012ed388cdc57

Last affected

47f67e012f8dea1280ddcbaaebd012ed388cdc57

Database specific

{
    "extracted_events": [
        {
            "introduced": "2022.1000.3005"
        },
        {
            "last_affected": "2022.1000.3005"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2022.*

2022.1000.3005

v2022.*

v2022.1000.3005

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-15516.json"