CVE-2026-90788

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-90788

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90788.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-90788

Published

2026-09-14T14:00:09Z

Modified

2026-09-15T03:48:23Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

Details

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-77",
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90788.json"
}

References

Affected packages

Git / github.com/magicblack/maccms10

Affected ranges

Type

GIT

Repo

https://github.com/magicblack/maccms10

Events

Introduced

94b1ea07e60a32ac31991110a1e83d706d9ccaa8

Last Affected

94b1ea07e60a32ac31991110a1e83d706d9ccaa8

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "2026.1000.4055"
        },
        {
            "last_affected": "2026.1000.4055"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

2026.*

2026.1000.4055

v2026.*

v2026.1000.4055

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90788.json"