Magento Open Source

3 results · Clear filters · Feed

• Critical 10.0
  CVE-2026-75650 Exploited Public exploit EPSS 99%

  Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

  Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbi…

  Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS
  Sep 7, 2026

  KEV Sep 8, 2026
• Critical 9.1
  CVE-2026-71362 Exploited Public exploit EPSS 92%

  Adobe Commerce | Incorrect Authorization (CWE-863)

  Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user in…

  Adobe Adobe Commerce Adobe Commerce B2B Magento Open Source Web / CMS
  Aug 11, 2026

  KEV Sep 24, 2026
• Critical 9.3
  CVE-2026-48356 Exploited Public exploit EPSS 47%

  Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

  Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or sessio…

  Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  Jul 14, 2026

  KEV Oct 27, 2026