VulnSocial

CVE-2026-4562Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in MacCMS 2025.1000.4052. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming API Endpoint. The manipulation results in missing authentication. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-287CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 4 mentions (2026-03-23); latest day: 1
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-03-23: 4Mentions · 2026-03-24: 1Technical Details · 2026-03-23: 3Technical Details · 2026-03-24: 103-2303-24
Signal classification2 categories
Disclosure
480.0%
General
120.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-03-234
Disclosure3General1
2026-03-241
Disclosure1
Full discourse5 posts
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-4562 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4562 #CVE-2026-4562 #CVE #High  #CyberSecurity #InfoSec https://t.co/Ps6r6qZRYA

    Post summary

    A new CVE (CVE-2026-4562) with a severity score of 7.3 affecting unspecified products has been announced, with a reference to the NVD documentation.

    0000019
    111 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4562 A security flaw has been discovered in MacCMS 2025.1000.4052. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming A… https://www.cve.org/CVERecord?id=CVE-2026-4562

    Post summary

    CVE-2026-4562 has been disclosed as a flaw in MacCMS 2025.1000.4052, specifically affecting an unknown part of the Timming.php controller component.

    0000085
    56.8K followersView on X
  • RedPacket Security@RedPacketSec
    General

    CVE Alert: CVE-2026-4562 - n/a - MacCMS - https://www.redpacketsecurity.com/cve-alert-cve-2026-4562-n-a-maccms/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-4562 #n-a #maccms

    Post summary

    The tweet links to a CVE alert but offers no explicit details about exploitation, technology, or mitigation.

    0000085
    3.6K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4562 - MacCMS Timming API Endpoint Timming.php weak authentication Intel Report: https://ift.tt/MQCpitX

    Post summary

    The alert announces CVE-2026-4562, outlining weak authentication in the MacCMS Timming.php endpoint; it supplies technical details but offers no PoC, exploit code, patch, or evidence of active exploitation.

    0000028
    289 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4562 MacCMS Remote Authentication Bypass in Timming API Endpoint 2025.1000.4052 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4562

    Post summary

    The text announces CVE-2026-4562, describing a remote authentication bypass in MacCMS’s Timming API endpoint for version 2025.1000.4052, without any mention of PoC, exploit tools, active exploitation, or remediation.

    0000048
    4.0K followersView on X

Explore more

Back to dashboard