https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 09:20:17 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10818 bdu:2025-10818 https://cve.radiocsirt.org/vuln/bdu:2025-10818 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0678 certfr-2025-avi-0678 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0678 https://cve.radiocsirt.org/vuln/euvd-2026-272248 EUVD-2026-272248 https://cve.radiocsirt.org/vuln/euvd-2026-272248 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49555 <p>Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.</p> <p>Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49555 https://cve.radiocsirt.org/vuln/ghsa-5777-jj7p-mpqw <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.</p> <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-5777-jj7p-mpqw https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1791 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und erhöhte Berechtigungen zu erlangen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und erhöhte Berechtigungen zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1791