HIGHCVSS v3.1 8.1Vulnerability
CVE-2026-128046
OpenMage magento-lts 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an unrestricted file upload vulnerability because the general/file/protected_extensions blocklist omits phar, php8, and phps. Unauthenticated attackers can upload a .phar file through a product File custom option to a predictable media/custom_options path and request it directly to execute code on servers that map .phar to PHP and serve that directory.
Properties
- Cvss score
- 8.1
- Epss score
- 0.00708
- First seen
- 2026-11-13T12:31:41+00:00
- Last seen
- 2026-11-13T12:31:41+00:00
- Euvd assigner
- VulnCheck
- Retrieved at
- 2026-11-14T00:51:03+00:00
- Src batch id
- euvd-20261113T133402Z-2d793f
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-125062
- Score
- 8.1
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-13T13:34:21+00:00
- Euvd vendor
- OpenMage
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-13T13:34:22+00:00
- Euvd base score
- 9.2
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Content hash
- 39d3517978b28638bf356f137fb718299ca4644aed9a58463f726ac8409b9a13
- Published at
- 2026-11-13T10:18:10.400
- Last modified
- 2026-11-13T17:17:27.287
- Euvd updated
- 2026-11-13T12:31:41+00:00
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph