A vulnerability was found in MacCMS 2025.1000.4052 and classified as critical. This affects an unknown part of the file application/api/controller/Timming.php of the component Timming API Endpoint. The manipulation results in missing authentication.

This vulnerability was named CVE-2026-4562. The attack may be performed from remote. In addition, an exploit is available.