MSRXAdobe Commerce / Magento vulnerabilities
3 Adobe Commerce / Magento flaws were confirmed exploited in the wild in the past 365 days. Patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-27 | CVE-2026-48356 Adobe Commerce and Magento Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. | 2026-11-10 |
| 2026-09-24 | CVE-2026-71362 Adobe Commerce and Magento Adobe Commerce and Magento Incorrect Authorization Vulnerability Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. | 2026-09-27 |
| 2026-09-08 | CVE-2026-75650 Adobe Commerce and Magento Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code. | 2026-09-11 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.28 (live), refreshed every 12 hours.