CVE-2026-49764

CriticalCVSS 9.8

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 16/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile — higher than 32% of all known CVEs

Summary

Versions of RegistrationMagic up to 6.0.8.6 have a vulnerability in unauthenticated authentication, which may allow attackers to take over user accounts.

Risk Assessment

Organizations may be exposed to unauthorized access to user accounts, leading to potential data breaches and security violations.

Recommendation

It is recommended to update to the latest version of RegistrationMagic to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.