Skip to content
OpenAdvisories

Product · Adobe

Adobe Commerce

210 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-103849 Public exploit

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the vict…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • Critical 10.0
    CVE-2026-75650 Exploited Public exploit EPSS 99%

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbi…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 8, 2026
  • Critical 9.1
    CVE-2026-71362 Exploited Public exploit EPSS 92%

    Adobe Commerce | Incorrect Authorization (CWE-863)

    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

    Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS
    KEV Sep 24, 2026
  • Critical 9.3
    CVE-2026-48356 Exploited Public exploit EPSS 47%

    Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

    Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or sessio…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Oct 27, 2026
  • Critical 9.1
    CVE-2025-54236 Exploited Public exploit EPSS 96%

    Adobe Commerce | Improper Input Validation (CWE-20)

    Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality,…

    Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
    KEV Oct 24, 2025
  • Critical 9.8
    CVE-2024-34102 Exploited Public exploit EPSS 100%

    XXE can expose crypt key and other secrets granting full admin access

    Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability …

    Adobe Adobe Commerce magento/community-edition Packagist
    KEV Jul 17, 2024