Adobe Commerce / Magento vulnerabilities

CVE records published for Adobe Adobe Commerce / Magento, newest first. Follow to get an email when a new one appears.

RSS feed
Total CVEs390
Last 30 days0
Critical45
Exploited6
390 results
8.7High
CVE-2026-95631

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitatio…

7.2High
CVE-2026-92910

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation …

9.1Critical
CVE-2026-92464

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitatio…

9.3Critical
CVE-2026-91013

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…

4.3Medium
CVE-2026-95630

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of…

8.1High
CVE-2026-92922

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they br…

9.8Critical
CVE-2026-92909

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does no…

8.3High
CVE-2026-92908

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing…

9.3Critical
CVE-2026-100133

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…

1.0%EPSS
8.7High
CVE-2026-92911

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they bro…

9.3Critical
CVE-2026-76201

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…

9.3Critical
CVE-2026-76200

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…

8.6High
CVE-2026-77109

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user i…

7.5High
CVE-2026-77108

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user …

8.2High
CVE-2026-76202

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user …

8.6High
CVE-2026-77774

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does…

8.7High
CVE-2026-77111

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a…

7.5High
CVE-2026-48416

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does…

7.7High
CVE-2026-48414

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they bro…

8.7High
CVE-2026-48413

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they bro…

7.6High
CVE-2026-48415

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing…

2.7Low
CVE-2026-48412

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue doe…

The list holds every record since the start of 2025 and older records for this product.