CWE-307 - Improper Restriction of Excessive Authentication Attempts

CVE-2026-111356: MacCMS v10 Password Recovery Vulnerability

Maccms V10 Through 2026.1000.4056 Account Takeover Via Password Recovery Brute Force

Maccms10 Password Reset Code Brute Force Account Takeover

CVE-2020

Security Advisories

CVE-2026-73046 - SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth Latest Vulnerabilities / 1d CVE ID : CVE-2026-73046 Published : Aug. 15, 2026, 10:16 p.m. 6 hours, 18 minutes ago Description : SiYuan before v3.7.4 improperly restricts excessive authentication attempts in the CheckAuth() middleware. The HTTP Basic Authentication branch, which guards nearly the entire /api/* surface, accepts the workspace access code (Conf.AccessAuthCode) as the Basic Auth password but never consult