https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:28:44.156193+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-06795 bdu:2023-06795 2026-10-04T21:28:44.161249+00:00 bdu:2023-06795 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0833 certfr-2023-avi-0833 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits Adobe</span>. Certaines d'entre… 2026-10-04T21:28:44.161300+00:00 certfr-2023-avi-0833 https://cve.radiocsirt.org/vuln/euvd-2026-8934 EUVD-2026-8934 2026-10-04T21:28:44.161320+00:00 EUVD-2026-8934 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38218 fkie_cve-2023-38218 2026-10-04T21:28:44.161332+00:00

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Incorrect Authorization . An authenticated attacker can exploit this to achieve information exposure and privilege escalation.

 https://cve.radiocsirt.org/vuln/ghsa-rpc7-gf58-v3x2 GHSA-rpc7-gf58-v3x2 — Magento Open Source allows Incorrect Authorization 2026-10-04T21:28:44.161365+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the `V1/customers/me` endpoint to achieve information exposure and privilege escalation.

 https://cve.radiocsirt.org/vuln/gsd-2023-38218 gsd-2023-38218 2026-10-04T21:28:44.161394+00:00 gsd-2023-38218 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2619 WID-SEC-W-2023-2619 — Adobe Magento: Mehrere Schwachstellen 2026-10-04T21:28:44.161406+00:00

Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.