Skip to content
OpenAdvisories

Product · Adobe

Adobe Commerce B2B

75 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-75650 Exploited Public exploit Scanner template EPSS 99%

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbi…

    KEV Sep 8, 2026
  • Critical 9.1
    CVE-2026-71362 Exploited Public exploit Scanner template EPSS 92%

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

    KEV Sep 24, 2026
  • Critical 9.3
    CVE-2026-48356 Exploited Public exploit EPSS 47%

    Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

    Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or sessio…

    KEV Oct 27, 2026