This question already has an answer here:
The Description of the patch SUPEE-11086 is:
SUPEE-11086, Magento Commerce 126.96.36.199 and Open Source 188.8.131.52 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities.
Also includes patch for SQL Injection with CVSSv3 Severity: 9.0
An unauthenticated user can execute arbitrary code through an SQL injection vulnerability, which causes sensitive data leakage.
Are there any issues or problems we can expect from this patch?