Magento Open Source (Adobe) - vulnerabilities (CVEs)

75 CVEs, 11 in the last 30 days, 19 known versions, newest CVE from 2026-10-13. Vendor: Adobe.

CVEs of Magento Open Source

• CVE-2026-95631 - CVSS 8.7 (high), 2026-10-13: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An…
• CVE-2026-103849 - CVSS 10 (critical), 2026-10-13: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code…
• CVE-2026-92910 - CVSS 7.2 (high), 2026-10-13: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-91013 - CVSS 9.3 (critical), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-92464 - CVSS 9.1 (critical), 2026-10-13: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An…
• CVE-2026-95630 - CVSS 4.3 (medium), 2026-10-13: Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could…
• CVE-2026-92922 - CVSS 8.1 (high), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
• CVE-2026-92909 - CVSS 9.8 (critical), 2026-10-13: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An…
• CVE-2026-92908 - CVSS 8.3 (high), 2026-10-13: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could…
• CVE-2026-100133 - CVSS 9.3 (critical), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-92911 - CVSS 8.7 (high), 2026-10-13: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-76200 - CVSS 9.3 (critical), 2026-09-08: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-76201 - CVSS 9.3 (critical), 2026-09-08: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into…
• CVE-2026-77109 - CVSS 8.6 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-77108 - CVSS 7.5 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-77110 - CVSS 7.6 (high), 2026-09-08: Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security…
• CVE-2026-76202 - CVSS 8.2 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-77774 - CVSS 8.6 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-77111 - CVSS 8.7 (high), 2026-09-08: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could…
• CVE-2026-75650 - CVSS 10 (critical), 2026-09-07: Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code…
• CVE-2026-48416 - CVSS 7.5 (high), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-48414 - CVSS 8.7 (high), 2026-08-11: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-48413 - CVSS 8.7 (high), 2026-08-11: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-48415 - CVSS 8.3 (high), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could…
• CVE-2026-48412 - CVSS 7.2 (high), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could…
• CVE-2026-48411 - CVSS 6.5 (medium), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could…
• CVE-2026-71362 - CVSS 9.1 (critical), 2026-08-11: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this…
• CVE-2026-47984 - CVSS 8.2 (high), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-47997 - CVSS 5.9 (medium), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-47988 - CVSS 8.6 (high), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-47999 - CVSS 4.8 (medium), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
• CVE-2026-48358 - CVSS 9.1 (critical), 2026-07-14: Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the…
• CVE-2026-48356 - CVSS 9.3 (critical), 2026-07-14: Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of…
• CVE-2026-47998 - CVSS 5.9 (medium), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this…
• CVE-2026-48000 - CVSS 6.1 (medium), 2026-07-14: Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a…
• CVE-2026-48001 - CVSS 3.7 (low), 2026-07-14: Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on…
• CVE-2026-47995 - CVSS 8.1 (high), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts…
• CVE-2026-48371 - CVSS 5.4 (medium), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-47994 - CVSS 8.7 (high), 2026-07-14: Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…
• CVE-2026-47996 - CVSS 6.8 (medium), 2026-07-14: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit…
• CVE-2026-47992 - CVSS 7.2 (high), 2026-07-14: Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in…
• CVE-2026-34686 - CVSS 8.7 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-34685 - CVSS 3.4 (low), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Input Validation…
• CVE-2026-34654 - CVSS 5.3 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party…
• CVE-2026-34658 - CVSS 4.8 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-34650 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-34653 - CVSS 8.7 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Limitation of a Pathname to a…
• CVE-2026-34656 - CVSS 4.3 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Authorization vulnerability…
• CVE-2026-34652 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party…
• CVE-2026-34655 - CVSS 4.8 (medium), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-34651 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-34647 - CVSS 7.4 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF)…
• CVE-2026-34646 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-34649 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-34645 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-34648 - CVSS 7.5 (high), 2026-05-12: Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption…
• CVE-2026-21361 - CVSS 8.1 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21311 - CVSS 8 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21310 - CVSS 5.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation…
• CVE-2026-21360 - CVSS 6.8 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to…
• CVE-2026-21309 - CVSS 7.5 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21359 - CVSS 4.7 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21297 - CVSS 4.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21293 - CVSS 5.5 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF)…
• CVE-2026-21296 - CVSS 4.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21292 - CVSS 5.4 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21295 - CVSS 3.1 (low), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site…
• CVE-2026-21294 - CVSS 5.5 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF)…
• CVE-2026-21285 - CVSS 4.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21290 - CVSS 8.7 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21284 - CVSS 8.1 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21289 - CVSS 7.5 (high), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21286 - CVSS 5.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability…
• CVE-2026-21291 - CVSS 4.8 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS)…
• CVE-2026-21282 - CVSS 5.3 (medium), 2026-03-11: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation…
• CVE-2024-34108 - CVSS 9.1 (critical), 2024-06-13: Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in…
• CVE-2022-24093 - CVSS 9.1 (critical), 2023-09-12: Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this…
• CVE-2023-22250 - CVSS 5.3 (medium), 2023-03-27: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result in a…
• CVE-2023-22249 - CVSS 4.8 (medium), 2023-03-27: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be…
• CVE-2023-22247 - CVSS 7.5 (high), 2023-03-27: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file…
• CVE-2023-22251 - CVSS 4.3 (medium), 2023-03-27: Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged…
• CVE-2022-35698 - CVSS 10 (critical), 2022-10-14: Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue…
• CVE-2022-35689 - CVSS 5.3 (medium), 2022-10-14: Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a…
• CVE-2021-39864 - CVSS 6.5 (medium), 2021-10-15: Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF)…
• CVE-2021-36041 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An…
• CVE-2021-36044 - CVSS 7.5 (high), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An…
• CVE-2021-36040 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An…
• CVE-2021-36043 - CVSS 8 (high), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled…
• CVE-2021-36039 - CVSS 6.5 (medium), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability via…
• CVE-2021-36042 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in…
• CVE-2021-36038 - CVSS 6.5 (medium), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in…
• CVE-2021-36012 - CVSS 6.5 (medium), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql…
• CVE-2021-36024 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements…
• CVE-2021-36027 - CVSS 6.5 (medium), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a stored cross-site scripting vulnerability that…
• CVE-2021-36030 - CVSS 7.5 (high), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability…
• CVE-2021-36033 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets…
• CVE-2021-36037 - CVSS 6.5 (medium), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization…
• CVE-2021-36022 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets…
• CVE-2021-36026 - CVSS 6.5 (medium), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a stored cross-site scripting vulnerability in…
• CVE-2021-36029 - CVSS 9.1 (critical), 2021-09-01: Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization…