CVE-2026-128031 | OpenMage magento-lts up to 20.18.1/20.x Admin Controllers _isAllowed improper authorization

November 13, 2026 Yanac

A vulnerability classified as problematic has been found in OpenMage magento-lts up to 20.18.1/20.x. Affected by this vulnerability is the function _isAllowed of the component Admin Controllers. Performing a manipulation results in improper authorization.

This vulnerability was named CVE-2026-128031. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More