Maccms10
Monthly
OS command injection in MacCMS10 2026.1000.4055 allows an authenticated administrator to execute arbitrary system commands on the underlying server via the Template Handler component by submitting a crafted URL-encoded path parameter. A public proof-of-concept exploit exists, referenced through a GitHub issue report against the project repository. No vendor patch has been released; the project maintainer has not responded to the disclosure.
OS command injection in MacCMS10 2026.1000.4055 allows an authenticated administrator to execute arbitrary system commands on the underlying server via the Template Handler component by submitting a crafted URL-encoded path parameter. A public proof-of-concept exploit exists, referenced through a GitHub issue report against the project repository. No vendor patch has been released; the project maintainer has not responded to the disclosure.