CVE-2026-15516
MEDIUMMacCMS Pro Installation Index.php step5 authorization
Title source: cnaDescription
A vulnerability was detected in MacCMS Pro up to 2022.1000.3005. Impacted is the function step5 of the file application/install/controller/Index.php of the component Installation Module. The manipulation results in authorization bypass. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit is now public and may be used. Upgrading to version 2022.1000.3025 is recommended to address this issue. Upgrading the affected component is recommended.
References (6)
Core 6
Core References
Vdb Entry, Technical Description vdb-entry
technical-description
VDB-377845 | MacCMS Pro Installation Index.php step5 authorization
https://vuldb.com/vuln/377845
Signature, Permissions Required signature
permissions-required
VDB-377845 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/377845/cti
Third Party Advisory third-party-advisory
CVE-2026-15516 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-15516
Third Party Advisory third-party-advisory
Submit #848741 | maccms maccms10 10 Logical Vulnerability / Auth Bypass
https://vuldb.com/submit/848741
Scores
CVSS v3
5.6
EPSS
0.0027
EPSS Percentile
19.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-285
CWE-639
Status
published
Products (2)
None/MacCMS Pro
2022.1000.3005
None/MacCMS Pro
2022.1000.3025
Published
Jul 13, 2026
Tracked Since
Jul 13, 2026