CVE-2026-116215 — Race Condition in Card Redemption in MacCMS v10 through 2026.1000.4056

MacCMS v10 through 2026.1000.4056 contains a race condition vulnerability in the Card::useData() function. Authenticated members can redeem the same recharge card multiple times through the user/buy endpoint.