Threats tagged 'ghsa-m463-2mww-7vjr'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-116215MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in Card::useData() that allows authenticated Low2.32026-10-26GCVE DatabaseCVE-2026-116215 MacCMS versions up to 2026.1000.4056 have a race condition vulnerability in the Card::useData() function. Authenticated users can exploit this flaw by sending multiple concurrent requests to redeem a recharge card multiple times before it is marked as used. This allows inflation of user points, enabling unauthorized purchase of VIP upgrades and paid content. Report on CVE-2026-116215 Vulnerability CWE-362 #ghsa-m463-2mww-7vjr	GCVE Database	2026-10-26

Page 1 of 1