Arbitrary file upload in Openmage Magento-lts

CVE-2026-40488

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the product cust…

Vulnerability class: Unrestricted File Upload

EPSS: 0.001 (25.4th percentile) — read the EPSS interpretation.