CVE-2026-128049

OpenMage Magento LTS versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 are vulnerable to a Cross-Site Request Forgery (CSRF) flaw. The vulnerability exists in the admin and storefront OAuth confirm and confirmSimple actions , which improperly accept GET requests without performing form...