https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T21:12:17.390466+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05132 bdu:2020-05132 2026-10-10T21:12:17.402435+00:00 bdu:2020-05132 https://cve.radiocsirt.org/vuln/bit-magento-2020-24407 BIT-magento-2020-24407 — Arbitrary code execution via file import functionality 2026-10-10T21:12:17.402473+00:00

Affected: Bitnami: magento

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-10T21:12:17.402506+00:00 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/cnvd-2020-57891 cnvd-2020-57891 2026-10-10T21:12:17.402524+00:00 cnvd-2020-57891 https://cve.radiocsirt.org/vuln/euvd-2026-171434 EUVD-2026-171434 2026-10-10T21:12:17.402536+00:00 EUVD-2026-171434 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24407 fkie_cve-2020-24407 2026-10-10T21:12:17.402547+00:00

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components.

 https://cve.radiocsirt.org/vuln/ghsa-7pxg-6p87-8c9v GHSA-7pxg-6p87-8c9v — Magento 2 Community Edition RCE via Unsafe File Upload 2026-10-10T21:12:17.402568+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components.

 https://cve.radiocsirt.org/vuln/gsd-2020-24407 gsd-2020-24407 2026-10-10T21:12:17.402589+00:00 gsd-2020-24407