Skip to content
Noroxi

Hanmac

9 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for Hanmac

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits every 10 minutes on paid plans, on the hour on the free plan.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • CVE alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools, at most 30 a day (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-128051
    19Monitor

    OpenMage magento-lts before 20.18.2 Stored XSS via Product Name in MSRP Popup

    MediumCVSS 4.8No exploit

    openmage · magento-ltsToday

  • CVE-2026-128049
    37Monitor

    OpenMage Magento LTS before 20.18.2 CSRF via OAuth Authorization Confirm

    CriticalCVSS 9.4No exploit

    openmage · magento-ltsToday

  • CVE-2026-128048
    27Monitor

    OpenMage magento-lts before 20.18.2 Information Disclosure via Email Template getConfig

    MediumCVSS 6.9No exploit

    openmage · magento-ltsToday

  • CVE-2026-128046
    36Monitor

    OpenMage magento-lts 20.17.0 before 20.18.2 Unrestricted File Upload RCE via Custom Options

    CriticalCVSS 9.2No exploit

    openmage · magento-ltsToday

  • CVE-2026-128045
    27Monitor

    OpenMage Magento-LTS before 20.18.2 Authorization Bypass via Forgeable RSS Order Key

    MediumCVSS 6.9No exploit

    openmage · magento-ltsToday

  • CVE-2026-128044
    34Monitor

    OpenMage magento-lts before 20.18.2 OAuth Callback URL Allowlist Bypass

    HighCVSS 8.7No exploit

    openmage · magento-ltsToday

  • CVE-2026-128041
    35Monitor

    OpenMage magento-lts before 20.18.2 Stored XSS via RSS Review Feed

    HighCVSS 8.8No exploit

    openmage · magento-ltsToday

  • CVE-2026-128040
    33Monitor

    OpenMage magento-lts before 20.18.2 Stored XSS via Admin Dataflow, Tax, OAuth, PayPal Fields

    HighCVSS 8.4No exploit

    openmage · magento-ltsToday

  • CVE-2026-128033
    21Monitor

    OpenMage magento-lts before 20.18.2 Information Disclosure via Order-Status RSS Feed

    MediumCVSS 5.3No exploit

    openmage · magento-ltsToday