CVE-2026-128042 | OpenMage magento-lts up to 20.18.x/21.0.0-beta2 Shopping Cart Price Rule Mage_SalesRule_Model_Validator race condition

A vulnerability classified as problematic was found in OpenMage magento-lts up to 20.18.x/21.0.0-beta2. Affected by this issue is the function Mage_SalesRule_Model_Validator of the component Shopping Cart Price Rule. Executing a manipulation can lead to race condition.

The identification of this vulnerability is CVE-2026-128042. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More