https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T20:41:40.010485+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-492 certfr-2019-avi-492 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… 2026-10-08T20:41:40.074548+00:00 certfr-2019-avi-492 https://cve.radiocsirt.org/vuln/cnvd-2019-40757 cnvd-2019-40757 2026-10-08T20:41:40.074592+00:00 cnvd-2019-40757 https://cve.radiocsirt.org/vuln/euvd-2026-51906 EUVD-2026-51906 2026-10-08T20:41:40.074608+00:00 EUVD-2026-51906 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8154 fkie_cve-2019-8154 2026-10-08T20:41:40.074619+00:00

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to modify product catalogs can trigger PHP file inclusion through a crafted XML file that specifies product design update.

 https://cve.radiocsirt.org/vuln/ghsa-4v2q-hjx3-c4vr GHSA-4v2q-hjx3-c4vr — Magento remote code execution vulnerability 2026-10-08T20:41:40.074655+00:00

Affected: Packagist: magento/community-edition

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to modify product catalogs can trigger PHP file inclusion through a crafted XML file that specifies product design update.

As per [the Magento Release 2.3.3](https://web.archive.org/web/20201126132230/https://devdocs.magento.com/guides/v2.3/release-notes/release-notes-2-3-3-commerce.html#new-security-only-patch-available), if you have already implemented the pre-release version of this patch (2.3.2-p1), it is highly recommended to promptly upgrade to 2.3.2-p2.

 https://cve.radiocsirt.org/vuln/gsd-2019-8154 gsd-2019-8154 2026-10-08T20:41:40.074684+00:00 gsd-2019-8154