This question already has an answer here:
The Description of the patch SUPEE-11086 is:
SUPEE-11086, Magento Commerce 22.214.171.124 and Open Source 126.96.36.199 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities.
Also includes patch for SQL Injection with CVSSv3 Severity: 9.0
An unauthenticated user can execute arbitrary code through an SQL injection vulnerability, which causes sensitive data leakage.
Are there any issues or problems we can expect from this patch?