Skip to content
OpenAdvisories
High 1 exploited CVE WID-SEC-2026-2768 7 CVEs

Adobe Magento: Mehrere Schwachstellen

Published Aug 11, 2026 · Updated Aug 12, 2026 · Revision 2 · de-DE

Vendor: Adobe Product: Magento Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Privilegien zu erhöhen, um einen Cross-Site Scripting Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Magento ist ein Online-Shop System von Adobe.

Vulnerabilities 7

  • Critical 9.1
    CVE-2026-71362 Exploited Public exploit Scanner template EPSS 92%

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 24, 2026
  • High 8.7
    CVE-2026-48413

    Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they bro…

    Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS
  • High 7.7
    CVE-2026-48414

    Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

    Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they bro…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • High 7.6
    CVE-2026-48415

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • High 7.5
    CVE-2026-48416

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • Medium 6.5
    CVE-2026-48411

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitat…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • Low 2.7
    CVE-2026-48412

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue doe…

    Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS

Revision history

  1. #2

    Exploit aufgenommen CVE-2026-71362

  2. #1

    Initiale Fassung

References