https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T08:18:25.852735+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-26285 CVE-2020-26285 — Widget instances allows a hacker to inject an executable file on the server on OpenMage 2026-10-23T08:18:25.868264+00:00

Affected: OpenMage magento-lts

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to import/export data and to create widget instances was able to inject an executable file on the server. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue solved