CVE-2026-128047 OpenMage magento-lts before 20.18.2 Account Takeover via Predictable Confirmation Key

OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer email-confirmation keys with md5uniqid and customer and administrator password-reset tokens with the non-cryptographic uniqHash. Unauthenticated attackers can brute-force the roughly 20-bit...

CVE-2026-128047

The OpenMage magento-lts platform versions before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 are vulnerable to an account takeover due to predictable confirmation keys . The root cause is the use of insufficiently random values, specifically generating customer email-confirmation ke...