CVE-2026-75465 magicblack CVE debrief

Who should care

Administrators and users of Maccms v10 v2026.1000.4055 should be aware of this vulnerability and take immediate action to secure their systems. Additionally, security teams and IT professionals responsible for monitoring and patching vulnerabilities should prioritize this CVE. Operators, platform administrators, and vulnerability management teams should review the affected product scope and plan defensive actions accordingly. Security teams should also review compensating controls for exposed systems and track exceptions and retest remediated assets to ensure the vulnerability is properly addressed and documented. This includes reviewing relevant monitoring, detection, and logs for exposed assets that need extra review and ensuring that all necessary steps are taken to prevent exploitation of the vulnerability in the future. The vulnerability's high CVSS score of 7.5 emphasizes the need for prompt action to mitigate potential risks associated with this vulnerability. Therefore, it is crucial for all relevant stakeholders to be aware of this issue and take appropriate measures to protect their systems and data. This may involve coordinating with vendors for patches or workarounds, implementing additional security controls, or conducting further risk assessments to determine the best course of action. By taking proactive steps, organizations can reduce the likelihood of successful exploitation and minimize potential damage in the event of an attack. Furthermore, maintaining awareness of this vulnerability and its potential impact can help organizations stay vigilant and adapt to emerging threats in the cybersecurity landscape. Overall, a comprehensive and coordinated approach is necessary to effectively address this vulnerability and protect against potential threats. This includes not only technical measures but also ensuring that personnel are informed and prepared to respond to potential incidents related to this vulnerability. By prioritizing this CVE and taking prompt action, organizations can enhance their security posture and reduce the risk of exploitation. In addition to immediate defensive actions, it is also important to consider long-term strategies to

Technical summary

The /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue. The interface fails to perform any authentication or authorization checks, allowing unauthenticated remote attackers to send crafted HTTP GET requests with limit and offset parameters to paginate and retrieve sensitive information of all registered users. This vulnerability has a HIGH CVSS score of 7.5, indicating a significant vulnerability. Immediate defensive actions are recommended, including verifying and applying vendor patches or updates, implementing additional authentication and authorization checks, monitoring for suspicious activity, restricting access to sensitive user information, and conducting regular security audits and vulnerability assessments.

Defensive priority

CVE-2026-75465 has a HIGH CVSS score of 7.5, indicating a significant vulnerability. Immediate defensive actions are recommended.

Recommended defensive actions

• Verify and apply vendor patches or updates for Maccms v10 v2026.1000.4055.
• Implement additional authentication and authorization checks for the /api.php/user/get_list endpoint.
• Monitor for suspicious activity related to the /api.php/user/get_list endpoint.
• Restrict access to sensitive user information.
• Conduct regular security audits and vulnerability assessments.

Evidence notes

The CVE-2026-75465 record indicates an Incorrect Access Control issue in Maccms v10 v2026.1000.4055. The /api.php/user/get_list endpoint fails to perform authentication or authorization checks, allowing unauthenticated remote attackers to retrieve sensitive user information. Defenders should verify the affected product deployments, review official advisories, and plan vendor-supported updates or mitigations. Compensating controls should be reviewed for exposed systems while remediation is scheduled and verified.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.