https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:05:09.172040+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01389 bdu:2022-01389 2026-10-05T15:05:09.176389+00:00 bdu:2022-01389 https://cve.radiocsirt.org/vuln/bit-magento-2021-36023 BIT-magento-2021-36023 — Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution 2026-10-05T15:05:09.176422+00:00

Affected: Bitnami: magento

Magento Commerce versions 2.4.2 (and earlier), 2.4.2 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 certfr-2021-avi-609 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-05T15:05:09.176455+00:00 certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/euvd-2026-219734 EUVD-2026-219734 2026-10-05T15:05:09.176473+00:00 EUVD-2026-219734 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36023 fkie_cve-2021-36023 2026-10-05T15:05:09.176484+00:00

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-8cjg-f53m-8m9q GHSA-8cjg-f53m-8m9q — Magento XML Injection vulnerability in the Widgets Update Layout 2026-10-05T15:05:09.176505+00:00

Affected: Packagist: magento/project-community-edition, Packagist: magento/community-edition

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2021-36023 gsd-2021-36023 2026-10-05T15:05:09.176529+00:00 gsd-2021-36023