CVE-2026-4563Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in MacCMS up to 2025.1000.4052. This vulnerability affects the function order_info of the file application/index/controller/User.php of the component Member Order Detail Interface. This manipulation of the argument order_id causes authorization bypass. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-285CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • Peaked 1d ago at 3 mentions (2026-03-23); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-03-23: 3Mentions · 2026-03-24: 1Technical Details · 2026-03-23: 303-2303-24
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-03-233
Disclosure2General1
2026-03-241
General1
Full discourse4 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-4563 MacCMS Member Order Detail Interface Authorization Bypass Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4563

    Post summary

    The text announces CVE‑2026‑4563 as an authorization‑bypass flaw in MacCMS’s Member Order Detail interface, without detailing a PoC, exploit, or patch.

    0001060
    4.0K followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-4563 📊 Severity: 4.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-4563 #CVE-2026-4563 #CVE #Medium  #CyberSecurity #InfoSec https://t.co/wKvi5Fsejq

    Post summary

    A concise announcement of CVE-2026-4563 with a moderate severity rating, but lacking proof‑of‑concept, exploitation details, patch information, or technical vulnerability specifics.

    0000019
    111 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-4563 A weakness has been identified in MacCMS up to 2025.1000.4052. This vulnerability affects the function order_info of the file application/index/controller/User.php of t… https://www.cve.org/CVERecord?id=CVE-2026-4563

    Post summary

    An identified weakness in MacCMS (up to version 2025.1000.4052) affects the order_info function within User.php. No exploit, PoC, patch, or active exploitation details are provided.

    0000089
    56.8K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4563 - MacCMS Member Order Detail User.php order_info authorization Intel Report: https://ift.tt/qbG8OeE

    Post summary

    An alert announces CVE-2026-4563 affecting MacCMS’s order_info authorization module, with a link to an Intel report but no PoC, exploit, or patch information.

    0000028
    289 followersView on X

Explore more