Read the docs
TI-2025-34067 Aliases CVE-2025-54236GHSA-wh92-6q6g-px7j

Adobe Commerce | Improper Input Validation (CWE-20)

Priority CRITICAL 98Exploited in the wildCWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub.

Summary

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.

Why it matters now

Exploitation Active In CISA KEV since 2025-10-24CISA due date 2025-11-14
EPSS 0.95353 99th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AdobeAdobe Commerceup to 2.4.4-p15—No fix listedCNA
—magento/community-edition (Packagist)up to 2.4.5-p14—No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)——No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)2.4.6-p1 – 2.4.6-p12—No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)——No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)2.4.9-alpha1 – 2.4.9-alpha2—No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)——No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)——No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)2.4.7-beta1 – 2.4.7-p7—No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)2.4.8-beta1 – 2.4.8-p2—No fix listedGHSA-wh92-6q6g-px7j
—magento/community-edition (Packagist)——No fix listedGHSA-wh92-6q6g-px7j
—magento/project-community-edition (Packagist)up to 2.0.2—No fix listedGHSA-wh92-6q6g-px7j
  • Adobe Commerce VendorAdobe Affected up to 2.4.4-p15 Fixed in — No fix listed CNA
  • magento/community-edition (Packagist) Vendor— Affected up to 2.4.5-p14 Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected — Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected 2.4.6-p1 – 2.4.6-p12 Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected — Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected 2.4.9-alpha1 – 2.4.9-alpha2 Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected — Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected — Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected 2.4.7-beta1 – 2.4.7-p7 Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected 2.4.8-beta1 – 2.4.8-p2 Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/community-edition (Packagist) Vendor— Affected — Fixed in — No fix listed GHSA-wh92-6q6g-px7j
  • magento/project-community-edition (Packagist) Vendor— Affected up to 2.0.2 Fixed in — No fix listed GHSA-wh92-6q6g-px7j

CPE configurations NVD · 152

CPEVersionsRoleVendor
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*2.4.4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*2.4.4 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*2.4.4 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*2.4.4 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*2.4.4 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*2.4.4 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*2.4.4 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*2.4.4 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*2.4.4 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*2.4.4 p3VulnerableAdobe
  • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* Versions 2.4.4 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* Versions 2.4.4 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* Versions 2.4.4 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* Versions 2.4.4 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* Versions 2.4.4 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* Versions 2.4.4 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* Versions 2.4.4 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* Versions 2.4.4 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* Versions 2.4.4 p3 Vulnerable ·Adobe
Show 142 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*2.4.4 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*2.4.4 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*2.4.4 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*2.4.4 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*2.4.4 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*2.4.4 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*2.4.5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*2.4.5 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*2.4.5 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*2.4.5 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*2.4.5 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*2.4.5 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*2.4.5 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*2.4.5 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*2.4.5 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*2.4.5 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*2.4.5 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*2.4.5 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*2.4.5 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*2.4.5 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*2.4.5 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*2.4.6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*2.4.6 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*2.4.6 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*2.4.6 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*2.4.6 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*2.4.6 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*2.4.6 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*2.4.6 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*2.4.6 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*2.4.6 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*2.4.6 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*2.4.6 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*2.4.6 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*2.4.7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*2.4.7 b1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*2.4.7 b2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*2.4.7 beta3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*2.4.7 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*2.4.7 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*2.4.7 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*2.4.7 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*2.4.7 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*2.4.7 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*2.4.7 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*2.4.8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*2.4.8 beta1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*2.4.8 beta2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*2.4.8 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*2.4.8 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:*2.4.9 alpha1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:*2.4.9 alpha2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*1.3.3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*1.3.3 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*1.3.3 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*1.3.3 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*1.3.3 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*1.3.3 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*1.3.3 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*1.3.3 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*1.3.3 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*1.3.3 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*1.3.3 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*1.3.3 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*1.3.3 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*1.3.3 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*1.3.3 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*1.3.3 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*1.3.4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*1.3.4 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*1.3.4 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*1.3.4 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*1.3.4 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*1.3.4 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*1.3.4 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*1.3.4 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*1.3.4 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*1.3.4 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*1.3.4 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*1.3.4 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*1.3.4 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*1.3.4 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*1.3.4 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*1.4.2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*1.4.2 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*1.4.2 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*1.4.2 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*1.4.2 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*1.4.2 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*1.4.2 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*1.4.2 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*1.5.2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*1.5.2 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*1.5.2 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:*1.5.3 alpha1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:*1.5.3 alpha2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*2.4.5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*2.4.5 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*2.4.5 p10VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:*2.4.5 p11VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:*2.4.5 p12VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:*2.4.5 p13VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:*2.4.5 p14VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*2.4.5 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*2.4.5 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*2.4.5 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*2.4.5 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*2.4.5 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*2.4.5 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*2.4.5 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*2.4.5 p9VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*2.4.6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*2.4.6 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*2.4.6 p10VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*2.4.6 p11VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*2.4.6 p12VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*2.4.6 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*2.4.6 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*2.4.6 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*2.4.6 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*2.4.6 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*2.4.6 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*2.4.6 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*2.4.6 p9VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*2.4.7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*2.4.7 b1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*2.4.7 b2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*2.4.7 beta3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*2.4.7 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*2.4.7 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*2.4.7 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*2.4.7 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*2.4.7 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*2.4.7 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*2.4.7 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*2.4.8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*2.4.8 beta1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*2.4.8 beta2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*2.4.8 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*2.4.8 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.9:alpha1:*:*:open_source:*:*:*2.4.9 alpha1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.9:alpha2:*:*:open_source:*:*:*2.4.9 alpha2VulnerableAdobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* Versions 2.4.4 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* Versions 2.4.4 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* Versions 2.4.4 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* Versions 2.4.4 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* Versions 2.4.4 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* Versions 2.4.4 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* Versions 2.4.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* Versions 2.4.5 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* Versions 2.4.5 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* Versions 2.4.5 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* Versions 2.4.5 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* Versions 2.4.5 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* Versions 2.4.5 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* Versions 2.4.5 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* Versions 2.4.5 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* Versions 2.4.5 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* Versions 2.4.5 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* Versions 2.4.5 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* Versions 2.4.5 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* Versions 2.4.5 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* Versions 2.4.5 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* Versions 2.4.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* Versions 2.4.6 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* Versions 2.4.6 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* Versions 2.4.6 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* Versions 2.4.6 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* Versions 2.4.6 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* Versions 2.4.6 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* Versions 2.4.6 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* Versions 2.4.6 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* Versions 2.4.6 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* Versions 2.4.6 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* Versions 2.4.6 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* Versions 2.4.6 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* Versions 2.4.7 b1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* Versions 2.4.7 b2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* Versions 2.4.7 beta3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* Versions 2.4.7 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* Versions 2.4.7 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* Versions 2.4.7 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* Versions 2.4.7 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* Versions 2.4.7 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* Versions 2.4.7 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* Versions 2.4.7 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* Versions 2.4.8 beta1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* Versions 2.4.8 beta2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* Versions 2.4.8 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* Versions 2.4.8 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:* Versions 2.4.9 alpha1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:* Versions 2.4.9 alpha2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* Versions 1.3.3 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* Versions 1.3.3 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* Versions 1.3.3 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* Versions 1.3.3 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* Versions 1.3.3 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* Versions 1.3.3 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* Versions 1.3.3 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* Versions 1.3.3 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* Versions 1.3.3 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* Versions 1.3.3 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* Versions 1.3.3 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* Versions 1.3.3 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* Versions 1.3.3 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* Versions 1.3.3 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* Versions 1.3.3 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* Versions 1.3.4 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* Versions 1.3.4 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* Versions 1.3.4 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* Versions 1.3.4 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* Versions 1.3.4 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* Versions 1.3.4 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* Versions 1.3.4 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* Versions 1.3.4 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* Versions 1.3.4 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* Versions 1.3.4 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* Versions 1.3.4 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* Versions 1.3.4 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* Versions 1.3.4 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* Versions 1.3.4 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* Versions 1.4.2 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* Versions 1.4.2 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* Versions 1.4.2 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* Versions 1.4.2 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* Versions 1.4.2 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* Versions 1.4.2 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* Versions 1.4.2 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* Versions 1.5.2 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* Versions 1.5.2 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:* Versions 1.5.3 alpha1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:* Versions 1.5.3 alpha2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:* Versions 2.4.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:* Versions 2.4.5 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:* Versions 2.4.5 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:* Versions 2.4.5 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:* Versions 2.4.5 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:* Versions 2.4.5 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:* Versions 2.4.5 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:* Versions 2.4.5 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:* Versions 2.4.5 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:* Versions 2.4.5 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:* Versions 2.4.5 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:* Versions 2.4.5 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:* Versions 2.4.5 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:* Versions 2.4.5 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:* Versions 2.4.5 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* Versions 2.4.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* Versions 2.4.6 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* Versions 2.4.6 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* Versions 2.4.6 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* Versions 2.4.6 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* Versions 2.4.6 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* Versions 2.4.6 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* Versions 2.4.6 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* Versions 2.4.6 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* Versions 2.4.6 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* Versions 2.4.6 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* Versions 2.4.6 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* Versions 2.4.6 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* Versions 2.4.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* Versions 2.4.7 b1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* Versions 2.4.7 b2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* Versions 2.4.7 beta3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* Versions 2.4.7 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* Versions 2.4.7 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* Versions 2.4.7 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* Versions 2.4.7 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* Versions 2.4.7 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* Versions 2.4.7 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* Versions 2.4.7 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* Versions 2.4.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* Versions 2.4.8 beta1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* Versions 2.4.8 beta2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* Versions 2.4.8 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* Versions 2.4.8 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.9:alpha1:*:*:open_source:*:*:* Versions 2.4.9 alpha1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.9:alpha2:*:*:open_source:*:*:* Versions 2.4.9 alpha2 Vulnerable ·Adobe

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2025-10-24 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2025-54236
  3. 2026-10-03 Alias added: GHSA-wh92-6q6g-px7j

References

Exploit 1

Advisory 3

Other 2

  • TI-2026-52938 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) KEVCVSS 3.1CRITICAL 10.0
  • TI-2024-22559 XXE can expose crypt key and other secrets granting full admin access KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-08035 Adobe Commerce checkout improper input validation leads to remote code execution KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-35762 Unrestricted file upload in Adobe Commerce allows code execution KEVCVSS 3.1CRITICAL 9.3
  • TI-2026-50010 Adobe Commerce | Incorrect Authorization (CWE-863) KEVCVSS 3.1CRITICAL 9.1
  • TI-2025-18169 Adobe Commerce | Incorrect Authorization (CWE-863) CVSS 3.1CRITICAL 9.1
See all 213 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences