We have upgraded Magento to 126.96.36.199 and check in magereport.com , everything is fine but it is showing
7405 not installed.
How can i solve this, please find the below screenshot:
If you upgraded with patches then you can find the applied patches file applied.patches.list in the app/etc/ directory.
When patches are applied this file is automatically updated. Check if the 7405 patch appears in the applied patches list.
If you upgraded via the 188.8.131.52 source code or you can see the 7405 patch was installed then perhaps MageReport cannot detect this vulnerability status correctly due to a custom module as stated on the report page.
If this is the case confirm it by disabling the module and running the report again.
You are upgraded to 184.108.40.206. It will included all security patches SUPEE - 9767 V2. Some time folder permission changes also show like that. Please check folder permission also.
You can also check SUPEE 7405 files updated in your files.
Magereport use behavior-based identification patterns. This is possible because each Magento patch introduces subtle changes in behavior. Apart from that, it is possible to request a few static files and derive the Magento version from that. check for more info Github.