Adobe Commerce B2b (Adobe) - vulnerabilities (CVEs)

75 CVEs, 11 in the last 30 days, 1 known versions, newest CVE from 2026-10-13. Vendor: Adobe.

CVEs of Adobe Commerce B2b

• CVE-2026-95631 - CVSS 8.7 (high), 2026-10-13: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An…
• CVE-2026-103849 - CVSS 10 (critical), 2026-10-13: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code…
• CVE-2026-92910 - CVSS 7.2 (high), 2026-10-13: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-91013 - CVSS 9.3 (critical), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-92464 - CVSS 9.1 (critical), 2026-10-13: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An…
• CVE-2026-95630 - CVSS 4.3 (medium), 2026-10-13: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could…
• CVE-2026-92922 - CVSS 8.1 (high), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
• CVE-2026-92909 - CVSS 9.8 (critical), 2026-10-13: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An…
• CVE-2026-92908 - CVSS 8.3 (high), 2026-10-13: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could…
• CVE-2026-100133 - CVSS 9.3 (critical), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-92911 - CVSS 8.7 (high), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-76200 - CVSS 9.3 (critical), 2026-09-08: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-76201 - CVSS 9.3 (critical), 2026-09-08: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-77109 - CVSS 8.6 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-77108 - CVSS 7.5 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-77110 - CVSS 7.6 (high), 2026-09-08: Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security…
• CVE-2026-76202 - CVSS 8.2 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-77774 - CVSS 8.6 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-77111 - CVSS 8.7 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could…
• CVE-2026-75650 - CVSS 10 (critical), 2026-09-07: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code…
• CVE-2026-48416 - CVSS 7.5 (high), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-48414 - CVSS 8.7 (high), 2026-08-11: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-48413 - CVSS 8.7 (high), 2026-08-11: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-48415 - CVSS 8.3 (high), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could…
• CVE-2026-48412 - CVSS 7.2 (high), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could…
• CVE-2026-48411 - CVSS 6.5 (medium), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could…
• CVE-2026-71362 - CVSS 9.1 (critical), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-47984 - CVSS 8.2 (high), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-47997 - CVSS 5.9 (medium), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-47988 - CVSS 8.6 (high), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-47999 - CVSS 4.8 (medium), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
• CVE-2026-48358 - CVSS 9.1 (critical), 2026-07-14: Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the…
• CVE-2026-48356 - CVSS 9.3 (critical), 2026-07-14: Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of…
• CVE-2026-47998 - CVSS 5.9 (medium), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-48000 - CVSS 6.1 (medium), 2026-07-14: Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a…
• CVE-2026-48001 - CVSS 3.7 (low), 2026-07-14: Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on…
• CVE-2026-47995 - CVSS 8.1 (high), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
• CVE-2026-48371 - CVSS 5.4 (medium), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-47994 - CVSS 8.7 (high), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-47996 - CVSS 6.8 (medium), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit…
• CVE-2026-47992 - CVSS 7.2 (high), 2026-07-14: Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in…
• CVE-2026-34686 - CVSS 8.7 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-34685 - CVSS 3.4 (low), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Input Validation…
• CVE-2026-34654 - CVSS 5.3 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party…
• CVE-2026-34658 - CVSS 4.8 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-34650 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-34653 - CVSS 8.7 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Limitation of a Pathname to a…
• CVE-2026-34656 - CVSS 4.3 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Authorization vulnerability…
• CVE-2026-34652 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party…
• CVE-2026-34655 - CVSS 4.8 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-34651 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-34647 - CVSS 7.4 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF)…
• CVE-2026-34646 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-34649 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-34645 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-34648 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-21361 - CVSS 8.1 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21311 - CVSS 8 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21310 - CVSS 5.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation…
• CVE-2026-21360 - CVSS 6.8 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to…
• CVE-2026-21309 - CVSS 7.5 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21359 - CVSS 4.7 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21297 - CVSS 4.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21293 - CVSS 5.5 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF)…
• CVE-2026-21296 - CVSS 4.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21292 - CVSS 5.4 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21295 - CVSS 3.1 (low), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site…
• CVE-2026-21294 - CVSS 5.5 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF)…
• CVE-2026-21285 - CVSS 4.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21290 - CVSS 8.7 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21284 - CVSS 8.1 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21289 - CVSS 7.5 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21286 - CVSS 5.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21291 - CVSS 4.8 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21282 - CVSS 5.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation…