https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T20:20:54.404135+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-40832 cnvd-2019-40832 2026-10-17T20:20:54.467374+00:00 cnvd-2019-40832 https://cve.radiocsirt.org/vuln/euvd-2026-51998 EUVD-2026-51998 2026-10-17T20:20:54.467414+00:00 EUVD-2026-51998 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8230 fkie_cve-2019-8230 2026-10-17T20:20:54.467428+00:00

In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

 https://cve.radiocsirt.org/vuln/ghsa-qp43-2vhf-cj8g GHSA-qp43-2vhf-cj8g — Magento Remote code execution through support/output path modification 2026-10-17T20:20:54.467456+00:00

Affected: Packagist: magento/core

In Magento Open Source prior to 1.9.4.3, and Magento Commerce prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

 https://cve.radiocsirt.org/vuln/gsd-2019-8230 gsd-2019-8230 2026-10-17T20:20:54.467479+00:00 gsd-2019-8230