Commerce and Magento vulnerabilities
3 published alerts for Adobe Commerce and Magento.
Adobe Commerce and Magento Incorrect Authorization Vulnerability
Adobe Commerce and Magento is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-71362). Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. CISA remediation due date: 2026-09-27. If you need help checking exposure, call (864) 335-9223.
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe Commerce and Magento is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-75650). Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. CISA remediation due date: 2026-09-11. If you need help checking exposure, call (864) 335-9223.
Adobe Commerce and Magento Improper Input Validation Vulnerability
Adobe Commerce and Magento is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2025-54236). Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API. CISA remediation due date: 2025-11-14. If you need help checking exposure, call (864) 335-9223.