https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T17:31:05.736468+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01395 bdu:2022-01395 2026-10-09T17:31:05.740873+00:00 bdu:2022-01395 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 certfr-2021-avi-609 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-09T17:31:05.740913+00:00 certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/cnvd-2021-90925 cnvd-2021-90925 2026-10-09T17:31:05.740933+00:00 cnvd-2021-90925 https://cve.radiocsirt.org/vuln/euvd-2026-179926 EUVD-2026-179926 2026-10-09T17:31:05.740947+00:00 EUVD-2026-179926 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36042 fkie_cve-2021-36042 2026-10-09T17:31:05.740958+00:00

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-6cwv-wj7v-73xp GHSA-6cwv-wj7v-73xp — Magento executes code via the API File Option Upload Extension 2026-10-09T17:31:05.740987+00:00

Affected: Packagist: magento/project-community-edition, Packagist: magento/community-edition

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2021-36042 gsd-2021-36042 2026-10-09T17:31:05.741014+00:00 gsd-2021-36042