Skip to content

CVE record · 1 source

CVE-2026-128049

CVSS 9.0

OpenMage Magento LTS before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in the admin and…

Vendor: OpenMage
Product: magento-lts
CVSS v3.1: 9.0 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Weakness: CWE-352
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

38

CVE NVD 10h ago

OpenMage Magento LTS before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in the admin and…

OpenMage Magento LTS before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in the admin and storefront OAuth confirm and confirmSimple actions, which accept GET requests without…

CVSS 9.0 CVE-2026-128049 OpenMage