CVE-2026-128044 | OpenMage magento-lts up to 20.18.1/21.0.0-beta2 OAuth Callback Validation input validation

November 13, 2026 Yanac

A vulnerability described as problematic has been identified in OpenMage magento-lts up to 20.18.1/21.0.0-beta2. This affects an unknown part of the component OAuth Callback Validation. Executing a manipulation can lead to improper input validation.

This vulnerability is handled as CVE-2026-128044. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More