https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T12:30:45.486316+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-492 certfr-2019-avi-492 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… 2026-10-27T12:30:45.550811+00:00 certfr-2019-avi-492 https://cve.radiocsirt.org/vuln/cnvd-2019-40731 cnvd-2019-40731 2026-10-27T12:30:45.550851+00:00 cnvd-2019-40731 https://cve.radiocsirt.org/vuln/euvd-2026-51940 EUVD-2026-51940 2026-10-27T12:30:45.550867+00:00 EUVD-2026-51940 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8159 fkie_cve-2019-8159 2026-10-27T12:30:45.550879+00:00

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection.

 https://cve.radiocsirt.org/vuln/ghsa-47h6-hfpv-7phj GHSA-47h6-hfpv-7phj — Magento 2 Community Edition RCE Vulnerability 2026-10-27T12:30:45.550906+00:00

Affected: Packagist: magento/community-edition

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection.

As per [the Magento Release 2.3.3](https://web.archive.org/web/20201126132230/https://devdocs.magento.com/guides/v2.3/release-notes/release-notes-2-3-3-commerce.html#new-security-only-patch-available), if you have already implemented the pre-release version of this patch (2.3.2-p1), it is highly recommended to promptly upgrade to 2.3.2-p2.

 https://cve.radiocsirt.org/vuln/gsd-2019-8159 gsd-2019-8159 2026-10-27T12:30:45.550932+00:00 gsd-2019-8159