https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T08:28:57.976901+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01396 bdu:2022-01396 2026-10-09T08:28:57.981386+00:00 bdu:2022-01396 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 certfr-2021-avi-609 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-09T08:28:57.981419+00:00 certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/cnvd-2021-90926 cnvd-2021-90926 2026-10-09T08:28:57.981438+00:00 cnvd-2021-90926 https://cve.radiocsirt.org/vuln/euvd-2026-185009 EUVD-2026-185009 2026-10-09T08:28:57.981451+00:00 EUVD-2026-185009 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36041 fkie_cve-2021-36041 2026-10-09T08:28:57.981461+00:00

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could upload a specially crafted file in the 'pub/media` directory could lead to remote code execution.

 https://cve.radiocsirt.org/vuln/ghsa-mx5m-j5xr-jg8c GHSA-mx5m-j5xr-jg8c — Magento vulnerable to file upload attack 2026-10-09T08:28:57.981488+00:00

Affected: Packagist: magento/project-community-edition, Packagist: magento/community-edition

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could upload a specially crafted file in the 'pub/media` directory could lead to remote code execution.

 https://cve.radiocsirt.org/vuln/gsd-2021-36041 gsd-2021-36041 2026-10-09T08:28:57.981514+00:00 gsd-2021-36041