Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:29:16 +0000 CVE-2026-71232 — MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE https://cve.radiocsirt.org/vuln/cve-2026-71232 <p><strong>Affected:</strong> magicblack maccms10</p> <p>MacCMS10&#39;s admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log.</p> <p><strong>Affected:</strong> magicblack maccms10</p> <p>MacCMS10&#39;s admin template editor (application/admin/controller/Template.php) blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, show_source, create_function, register_shutdown_function, register_tick_function, and error_log.</p> https://cve.radiocsirt.org/vuln/cve-2026-71232