https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:39:22.098696+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05131 bdu:2020-05131 2026-10-10T21:39:22.179726+00:00 bdu:2020-05131 https://cve.radiocsirt.org/vuln/bit-magento-2020-24404 BIT-magento-2020-24404 — Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API 2026-10-10T21:39:22.179766+00:00

Affected: Bitnami: magento

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-10T21:39:22.179801+00:00 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/cnvd-2020-57884 cnvd-2020-57884 2026-10-10T21:39:22.179820+00:00 cnvd-2020-57884 https://cve.radiocsirt.org/vuln/euvd-2026-166622 EUVD-2026-166622 2026-10-10T21:39:22.179832+00:00 EUVD-2026-166622 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24404 fkie_cve-2020-24404 2026-10-10T21:39:22.179842+00:00

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.

 https://cve.radiocsirt.org/vuln/ghsa-rwf7-652f-76mv GHSA-rwf7-652f-76mv — Magento 2 Community Edition vulnerable to Improper Authorization 2026-10-10T21:39:22.179863+00:00

Affected: Packagist: magento/community-edition

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.

 https://cve.radiocsirt.org/vuln/gsd-2020-24404 gsd-2020-24404 2026-10-10T21:39:22.179884+00:00 gsd-2020-24404