IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
5.9Media

CVE-2026-47998Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source; Adobe Adobe Commerce Events Publicada: (hace 4 meses)

Descripción

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.

Debilidad (CWE): CWE-863

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Adobe Adobe Commerce ≤ 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18, fixed 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul, 2.4.5-2026-jul, 2.4.4-2026-jul
Adobe Adobe Commerce B2B ≤ 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18, fixed 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
Adobe Adobe Commerce Events ≤ 1.20.0, fixed 1.21.0
adobe commerce 2.4.4
adobe commerce b2b 1.3.3
adobe i/o events 1.6.0 – < 1.21.0
adobe magento 2.4.6
Adobe Magento Open Source ≤ 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, fixed 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul

Referencias y parches

Coincidencias CPE (NVD) (60)
  • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p15:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:p10:*:*:*:*:*:*
  • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*

CVE recientes del mismo producto — Adobe Commerce / Magento

8.7Alta
CVE-2026-95631

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitatio…

7.2Alta
CVE-2026-92910

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation …

9.3Crítica
CVE-2026-91013

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…

9.1Crítica
CVE-2026-92464

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitatio…

4.3Media
CVE-2026-95630

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of…