Magento Open Source 1.9.3.6 and SUPEE-10266 include critical security enhancements. Please update your site as soon as possible. More information is available in the release notes: 
http://devdocs.magento.com/guides/m1x/ce19-ee114/ce1.9_release-notes.html.
