CVE-2026-128031

Vendor

OpenMage

Product

magento-lts

CVSS v3.1

3.8 AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Weakness

CWE-863

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 15
   CVE NVD 11h ago

   OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability because admin controllers'…

   OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization vulnerability because admin controllers' _isAllowed() checks fall back to, or only check, parent ACL resources instead…

   CVSS 3.8 CVE-2026-128031 OpenMage