Cipher based message authentication (CMAC) and block reordering Is Cipher based message authentication (CMAC) susceptible to block reordering (just like CBC)?
No, CMAC is not susceptible to block reordering.

Unlike CBC, the attacker does not see the values of the intermediate encryptions (and because of the tweak applied to the last block, he can't find that out by asking for the MAC of prefixes).  Hence, the attack cannot modify the plaintext (including reordering blocks) in a way to make a predictable change to the hash output.