CVE-2026-42207

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, MageProductAlertAddController::stockAction reads the uenc query parameter and passes...

PT-2026-37254

Name of the Vulnerable Software and Affected Versions Magento Long Term Support LTS versions prior to 20.18.0 Description The Mage ProductAlert AddController::stockAction function reads the uenc query parameter and passes it directly to $this- redirectUrl$backUrl without verifying if the URL is...

KB5053594: Windows 10 Version 1607 / Windows Server 2016 Security Update (March 2025)

The remote Windows host is missing security update 5053594. It is, therefore, affected by multiple vulnerabilities - Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network. CVE-2025-26645 - Sensitive data storage in improperly locked memory...