Magento has released new versions of Magento Commerce and Magento Open Source to increase product security:
Magento Commerce 126.96.36.199
Magento Open Source 188.8.131.52
SUPEE-10415 (patch for earlier Magento 1.x versions)
These releases contain multiple security changes that help close cross-site scripting and authenticated Admin user remote code execution vulnerabilities. We strongly recommend that all merchants upgrade to these versionsas soon as is reasonably possible.