Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 13:14:58 +0000 CVE-2026-25523 — Magento's X-Original-Url header can expose admin url https://cve.radiocsirt.org/vuln/cve-2026-25523 <p><strong>Affected:</strong> OpenMage magento-lts</p> <p>Magento-lts is a long-term support alternative to Magento Community Edition (CE). Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it&#39;s location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1.</p> <p><strong>Affected:</strong> OpenMage magento-lts</p> <p>Magento-lts is a long-term support alternative to Magento Community Edition (CE). Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it&#39;s location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-25523