CVE-2026-4562: MacCMS Timming API Endpoint Timming.php weak authentication

Published Mar 22, 2026

Updated

A security flaw has been discovered in MacCMS 2025.1000.4052. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming API Endpoint. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Affected Software

1 affected component

maccms MacCMS Timming API Endpoint=2025.1000.4052

Event History

Mar 22, 2026

CVE Published

via MITRE·11:09 PM

Data Sourced

via MITRE·11:09 PM

DescriptionSeverityWeakness

Mar 23, 2026

Data Sourced

via NVD·12:16 AM

DescriptionSeverityWeakness

Mar 15, 58208

Event

via FIRST·02:13 PM

Frequently Asked Questions

What is the severity of CVE-2026-4562?

The severity of CVE-2026-4562 is currently classified as high due to the weak authentication vulnerability.

How do I fix CVE-2026-4562?

To fix CVE-2026-4562, update to the latest version of MacCMS that addresses this authentication issue.

What component is affected by CVE-2026-4562?

CVE-2026-4562 affects the Timming API Endpoint in the application/api/controller/Timming.php file.

What are the risks associated with CVE-2026-4562?

The risks associated with CVE-2026-4562 include unauthorized access to the Timming API due to the lack of proper authentication.

Is CVE-2026-4562 specific to a certain version of MacCMS?

Yes, CVE-2026-4562 specifically affects MacCMS version 2025.1000.4052.