https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:41:52.844942+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-101206 cnvd-2021-101206 2026-10-05T04:41:52.850674+00:00 cnvd-2021-101206 https://cve.radiocsirt.org/vuln/euvd-2026-28157 EUVD-2026-28157 2026-10-05T04:41:52.850709+00:00 EUVD-2026-28157 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32758 fkie_cve-2021-32758 2026-10-05T04:41:52.850724+00:00

OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have this Issue patched.

 https://cve.radiocsirt.org/vuln/ghsa-26rr-v2j2-25fh GHSA-26rr-v2j2-25fh — Layout XML Arbitrary Code Fix 2026-10-05T04:41:52.850752+00:00

Affected: Packagist: openmage/magento-lts

### Impact Layout XML enabled admin users to execute arbitrary commands via block methods.

 https://cve.radiocsirt.org/vuln/gsd-2021-32758 gsd-2021-32758 2026-10-05T04:41:52.850775+00:00 gsd-2021-32758