CVE-2021-45786

CVE-2021-45786 is a critical authentication bypass vulnerability affecting maccms v10, allowing an unauthenticated attacker to gain privileges by manipulating the "col" and "openid" parameters during login at /index.php/user/login. With a CVSS score of 9.8, this flaw presents a high risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been observed, its high FAUCET Risk Score of 78/100 indicates a substantial threat.