https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T08:43:45.855691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05127 bdu:2020-05127 2026-10-12T08:43:45.938837+00:00 bdu:2020-05127 https://cve.radiocsirt.org/vuln/bit-magento-2020-24402 BIT-magento-2020-24402 — Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API 2026-10-12T08:43:45.938879+00:00

Affected: Bitnami: magento

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-12T08:43:45.938924+00:00 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/cnvd-2020-57889 cnvd-2020-57889 2026-10-12T08:43:45.938949+00:00 cnvd-2020-57889 https://cve.radiocsirt.org/vuln/euvd-2026-169107 EUVD-2026-169107 2026-10-12T08:43:45.938967+00:00 EUVD-2026-169107 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24402 fkie_cve-2020-24402 2026-10-12T08:43:45.938983+00:00

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.

 https://cve.radiocsirt.org/vuln/ghsa-hvf5-4jr9-fghh GHSA-hvf5-4jr9-fghh — Magento incorrect permissions vulnerability in the Integrations component 2026-10-12T08:43:45.939013+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.

 https://cve.radiocsirt.org/vuln/gsd-2020-24402 gsd-2020-24402 2026-10-12T08:43:45.939113+00:00 gsd-2020-24402