https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T13:39:31.295231+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-15244 CVE-2020-15244 — RCE in Magento 2026-10-18T13:39:31.296561+00:00

Affected: OpenMage magento-lts

In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. The issue is patched in versions 19.4.8 and 20.0.4.