https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:27:36.762779+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05060 bdu:2020-05060 2026-10-10T19:27:36.845186+00:00 bdu:2020-05060 https://cve.radiocsirt.org/vuln/bit-magento-2020-24401 BIT-magento-2020-24401 — Incorrect permissions following the deletion of a user role or deactivation of a user 2026-10-10T19:27:36.845234+00:00

Affected: Bitnami: magento

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-10T19:27:36.845282+00:00 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/cnvd-2020-57883 cnvd-2020-57883 2026-10-10T19:27:36.845311+00:00 cnvd-2020-57883 https://cve.radiocsirt.org/vuln/euvd-2026-170646 EUVD-2026-170646 2026-10-10T19:27:36.845331+00:00 EUVD-2026-170646 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24401 fkie_cve-2020-24401 2026-10-10T19:27:36.845349+00:00

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account.

 https://cve.radiocsirt.org/vuln/ghsa-f2g3-3c6q-4478 GHSA-f2g3-3c6q-4478 — Magento 2 Community Edition Incorrect Authorization 2026-10-10T19:27:36.845384+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account.

 https://cve.radiocsirt.org/vuln/gsd-2020-24401 gsd-2020-24401 2026-10-10T19:27:36.845422+00:00 gsd-2020-24401