https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T18:23:25.756081+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-24401 CVE-2020-24401 — Incorrect permissions following the deletion of a user role or deactivation of a user 2026-10-12T18:23:25.771876+00:00

Affected: Adobe Magento Commerce

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account.