Read the docs
TI-2026-35762 Aliases CVE-2026-48356GHSA-p3ch-8535-fp8j

Unrestricted file upload in Adobe Commerce allows code execution

Priority CRITICAL 99Exploited in the wildCWE-434Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-434.

Summary

Adobe Commerce, Adobe Commerce B2B, Magento Open Source and Adobe Commerce Events contain an unrestricted file upload flaw (CWE-434) that lets dangerous file types be uploaded. An unauthenticated remote attacker can achieve arbitrary code execution in the context of the current user if a victim visits a crafted URL or a compromised web page, potentially gaining elevated access to the victim's account or session. The flaw is listed in CISA KEV, added 2026-10-27.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Why it matters now

Exploitation Active In CISA KEV since 2026-10-27CISA due date 2026-11-10
EPSS 0.47472 98th percentileScored 2026-11-07
Fix Fixed Adobe Commerce (Adobe): 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul +3Adobe Commerce B2B (Adobe): 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul +2+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AdobeAdobe Commerceup to 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p182.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul, 2.4.5-2026-jul, 2.4.4-2026-julPatch availableCNA
AdobeAdobe Commerce B2Bup to 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p181.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-julPatch availableCNA
AdobeMagento Open Sourceup to 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p152.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-julPatch availableCNA
AdobeAdobe Commerce Eventsup to 1.20.01.21.0Patch availableCNA
  • Adobe Commerce VendorAdobe Affected up to 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18 Fixed in 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul, 2.4.5-2026-jul, 2.4.4-2026-jul Patch available CNA
  • Adobe Commerce B2B VendorAdobe Affected up to 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18 Fixed in 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul Patch available CNA
  • Magento Open Source VendorAdobe Affected up to 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15 Fixed in 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul Patch available CNA
  • Adobe Commerce Events VendorAdobe Affected up to 1.20.0 Fixed in 1.21.0 Patch available CNA

CPE configurations NVD · 171

CPEVersionsRoleVendor
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*2.4.4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*2.4.4 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*2.4.4 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*2.4.4 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*2.4.4 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*2.4.4 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*2.4.4 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*2.4.4 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*2.4.4 p16VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*2.4.4 p17VulnerableAdobe
  • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* Versions 2.4.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* Versions 2.4.4 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* Versions 2.4.4 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* Versions 2.4.4 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* Versions 2.4.4 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* Versions 2.4.4 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* Versions 2.4.4 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* Versions 2.4.4 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:* Versions 2.4.4 p16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:* Versions 2.4.4 p17 Vulnerable ·Adobe
Show 161 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:*2.4.4 p18VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*2.4.4 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*2.4.4 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*2.4.4 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*2.4.4 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*2.4.4 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*2.4.4 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*2.4.4 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*2.4.4 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*2.4.5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*2.4.5 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*2.4.5 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*2.4.5 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*2.4.5 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*2.4.5 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*2.4.5 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*2.4.5 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:*2.4.5 p16VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:*2.4.5 p17VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*2.4.5 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*2.4.5 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*2.4.5 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*2.4.5 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*2.4.5 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*2.4.5 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*2.4.5 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*2.4.5 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*2.4.6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*2.4.6 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*2.4.6 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*2.4.6 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*2.4.6 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*2.4.6 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:*2.4.6 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p15:*:*:*:*:*:*2.4.6 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*2.4.6 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*2.4.6 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*2.4.6 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*2.4.6 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*2.4.6 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*2.4.6 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*2.4.6 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*2.4.6 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*2.4.7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*2.4.7 b1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*2.4.7 b2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*2.4.7 beta3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*2.4.7 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p10:*:*:*:*:*:*2.4.7 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*2.4.7 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*2.4.7 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*2.4.7 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*2.4.7 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*2.4.7 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*2.4.7 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*2.4.7 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:*2.4.7 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*2.4.8VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*2.4.8 beta1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*2.4.8 beta2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*2.4.8 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*2.4.8 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*2.4.8 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:*2.4.8 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.8:p5:*:*:*:*:*:*2.4.8 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce:2.4.9:-:*:*:*:*:*:*2.4.9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*1.3.3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*1.3.3 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*1.3.3 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*1.3.3 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*1.3.3 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*1.3.3 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*1.3.3 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*1.3.3 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*1.3.3 p16VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:*1.3.3 p17VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p18:*:*:*:*:*:*1.3.3 p18VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*1.3.3 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*1.3.3 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*1.3.3 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*1.3.3 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*1.3.3 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*1.3.3 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*1.3.3 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*1.3.3 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*1.3.4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*1.3.4 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*1.3.4 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*1.3.4 p11VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*1.3.4 p12VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*1.3.4 p13VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*1.3.4 p14VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*1.3.4 p15VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:*1.3.4 p16VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p17:*:*:*:*:*:*1.3.4 p17VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*1.3.4 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*1.3.4 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*1.3.4 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*1.3.4 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*1.3.4 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*1.3.4 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*1.3.4 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*1.3.4 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*1.4.2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*1.4.2 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p10:*:*:*:*:*:*1.4.2 p10VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*1.4.2 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*1.4.2 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*1.4.2 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*1.4.2 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*1.4.2 p6VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*1.4.2 p7VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*1.4.2 p8VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:*1.4.2 p9VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*1.5.2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*1.5.2 p1VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*1.5.2 p2VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*1.5.2 p3VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:*1.5.2 p4VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p5:*:*:*:*:*:*1.5.2 p5VulnerableAdobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:-:*:*:*:*:*:*1.5.3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*2.4.6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*2.4.6 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*2.4.6 p10VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*2.4.6 p11VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*2.4.6 p12VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*2.4.6 p13VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:*2.4.6 p14VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p15:*:*:open_source:*:*:*2.4.6 p15VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*2.4.6 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*2.4.6 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*2.4.6 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*2.4.6 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*2.4.6 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*2.4.6 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*2.4.6 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*2.4.6 p9VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*2.4.7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*2.4.7 b1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*2.4.7 b2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*2.4.7 beta3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*2.4.7 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p10:*:*:open_source:*:*:*2.4.7 p10VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*2.4.7 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*2.4.7 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*2.4.7 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*2.4.7 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*2.4.7 p6VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*2.4.7 p7VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*2.4.7 p8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:*2.4.7 p9VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*2.4.8VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*2.4.8 beta1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*2.4.8 beta2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*2.4.8 p1VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*2.4.8 p2VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*2.4.8 p3VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:*2.4.8 p4VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.8:p5:*:*:open_source:*:*:*2.4.8 p5VulnerableAdobe
cpe:2.3:a:adobe:magento:2.4.9:-:*:*:open_source:*:*:*2.4.9VulnerableAdobe
cpe:2.3:a:adobe:i\/o_events:*:*:*:*:*:commerce:*:*1.6.0 to before 1.21.0VulnerableAdobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:* Versions 2.4.4 p18 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* Versions 2.4.4 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* Versions 2.4.4 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* Versions 2.4.4 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* Versions 2.4.4 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* Versions 2.4.4 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* Versions 2.4.4 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* Versions 2.4.4 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* Versions 2.4.4 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* Versions 2.4.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* Versions 2.4.5 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* Versions 2.4.5 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* Versions 2.4.5 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* Versions 2.4.5 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* Versions 2.4.5 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* Versions 2.4.5 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:* Versions 2.4.5 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:* Versions 2.4.5 p16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:* Versions 2.4.5 p17 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* Versions 2.4.5 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* Versions 2.4.5 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* Versions 2.4.5 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* Versions 2.4.5 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* Versions 2.4.5 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* Versions 2.4.5 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* Versions 2.4.5 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* Versions 2.4.5 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* Versions 2.4.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* Versions 2.4.6 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* Versions 2.4.6 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* Versions 2.4.6 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* Versions 2.4.6 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:* Versions 2.4.6 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:* Versions 2.4.6 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p15:*:*:*:*:*:* Versions 2.4.6 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* Versions 2.4.6 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* Versions 2.4.6 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* Versions 2.4.6 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* Versions 2.4.6 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* Versions 2.4.6 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* Versions 2.4.6 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* Versions 2.4.6 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* Versions 2.4.6 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* Versions 2.4.7 b1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* Versions 2.4.7 b2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* Versions 2.4.7 beta3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* Versions 2.4.7 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p10:*:*:*:*:*:* Versions 2.4.7 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* Versions 2.4.7 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* Versions 2.4.7 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* Versions 2.4.7 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* Versions 2.4.7 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* Versions 2.4.7 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* Versions 2.4.7 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:* Versions 2.4.7 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:* Versions 2.4.7 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* Versions 2.4.8 beta1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* Versions 2.4.8 beta2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* Versions 2.4.8 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* Versions 2.4.8 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:* Versions 2.4.8 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:* Versions 2.4.8 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.8:p5:*:*:*:*:*:* Versions 2.4.8 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce:2.4.9:-:*:*:*:*:*:* Versions 2.4.9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* Versions 1.3.3 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* Versions 1.3.3 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* Versions 1.3.3 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* Versions 1.3.3 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* Versions 1.3.3 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* Versions 1.3.3 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* Versions 1.3.3 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:* Versions 1.3.3 p16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:* Versions 1.3.3 p17 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p18:*:*:*:*:*:* Versions 1.3.3 p18 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* Versions 1.3.3 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* Versions 1.3.3 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* Versions 1.3.3 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* Versions 1.3.3 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* Versions 1.3.3 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* Versions 1.3.3 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* Versions 1.3.3 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* Versions 1.3.3 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* Versions 1.3.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* Versions 1.3.4 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* Versions 1.3.4 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* Versions 1.3.4 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* Versions 1.3.4 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* Versions 1.3.4 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* Versions 1.3.4 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:* Versions 1.3.4 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:* Versions 1.3.4 p16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p17:*:*:*:*:*:* Versions 1.3.4 p17 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* Versions 1.3.4 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* Versions 1.3.4 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* Versions 1.3.4 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* Versions 1.3.4 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* Versions 1.3.4 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* Versions 1.3.4 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* Versions 1.3.4 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* Versions 1.3.4 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* Versions 1.4.2 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p10:*:*:*:*:*:* Versions 1.4.2 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* Versions 1.4.2 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* Versions 1.4.2 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* Versions 1.4.2 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* Versions 1.4.2 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* Versions 1.4.2 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* Versions 1.4.2 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:* Versions 1.4.2 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:* Versions 1.4.2 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* Versions 1.5.2 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* Versions 1.5.2 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:* Versions 1.5.2 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:* Versions 1.5.2 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.2:p5:*:*:*:*:*:* Versions 1.5.2 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:commerce_b2b:1.5.3:-:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* Versions 2.4.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* Versions 2.4.6 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* Versions 2.4.6 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* Versions 2.4.6 p11 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* Versions 2.4.6 p12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:* Versions 2.4.6 p13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:* Versions 2.4.6 p14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p15:*:*:open_source:*:*:* Versions 2.4.6 p15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* Versions 2.4.6 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* Versions 2.4.6 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* Versions 2.4.6 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* Versions 2.4.6 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* Versions 2.4.6 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* Versions 2.4.6 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* Versions 2.4.6 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* Versions 2.4.6 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* Versions 2.4.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* Versions 2.4.7 b1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* Versions 2.4.7 b2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* Versions 2.4.7 beta3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* Versions 2.4.7 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p10:*:*:open_source:*:*:* Versions 2.4.7 p10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* Versions 2.4.7 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* Versions 2.4.7 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* Versions 2.4.7 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* Versions 2.4.7 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* Versions 2.4.7 p6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* Versions 2.4.7 p7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:* Versions 2.4.7 p8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:* Versions 2.4.7 p9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* Versions 2.4.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* Versions 2.4.8 beta1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* Versions 2.4.8 beta2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* Versions 2.4.8 p1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* Versions 2.4.8 p2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:* Versions 2.4.8 p3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:* Versions 2.4.8 p4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.8:p5:*:*:open_source:*:*:* Versions 2.4.8 p5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:magento:2.4.9:-:*:*:open_source:*:*:* Versions 2.4.9 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:i\/o_events:*:*:*:*:*:commerce:*:* Versions 1.6.0 to before 1.21.0 Vulnerable ·Adobe

Remediation

Upgrade Adobe Commerce to 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul, 2.4.5-2026-jul or 2.4.4-2026-jul; Adobe Commerce B2B to 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul or 1.3.3-2026-jul; Magento Open Source to 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul or 2.4.6-2026-jul; and Adobe Commerce Events to 1.21.0. CISA requires U.S. federal agencies to fix it by 2026-11-10.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA Adobe Commerce (Adobe) Fixed in 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul, 2.4.5-2026-jul, 2.4.4-2026-jul
  • Fix · CNA Adobe Commerce B2B (Adobe) Fixed in 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
  • Fix · CNA Magento Open Source (Adobe) Fixed in 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul
  • Fix · CNA Adobe Commerce Events (Adobe) Fixed in 1.21.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Adobe Commerce, Adobe Commerce B2B and 2 more products — helpx.adobe.com/security/products/magento/apsb26-73.html

    14 records Highest priority Priority CRITICAL 1 CRITICAL, 4 MEDIUM, 9 LOW

    Other records, highest priority first

    • TI-2026-35436 Adobe Commerce | Incorrect Authorization (CWE-863)Priority MEDIUM 45
    • TI-2026-35764 Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)Priority MEDIUM 44
    • TI-2026-35432 Adobe Commerce | Incorrect Authorization (CWE-863)Priority MEDIUM 43
    Show all 14 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-48356
  2. 2026-10-03 Alias added: GHSA-p3ch-8535-fp8j
  3. 2026-10-27 Added to CISA KEV
  4. 2026-10-27 EPSS moved to the 95th–99th percentile
  5. 2026-10-27 CISA SSVC decision points changed
  6. 2026-10-27 Priority changed: MEDIUM → CRITICAL
  7. 2026-10-28 EPSS moved to the 99th percentile and above
  8. 2026-10-28 CISA SSVC decision points changed
  9. 2026-10-29 EPSS moved to the 95th–99th percentile

References

Advisory 3

  • TI-2026-52938 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) KEVCVSS 3.1CRITICAL 10.0
  • TI-2024-22559 XXE can expose crypt key and other secrets granting full admin access KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-08035 Adobe Commerce checkout improper input validation leads to remote code execution KEVCVSS 3.1CRITICAL 9.8
  • TI-2026-50010 Adobe Commerce | Incorrect Authorization (CWE-863) KEVCVSS 3.1CRITICAL 9.1
  • TI-2025-34067 Adobe Commerce | Improper Input Validation (CWE-20) KEVCVSS 3.1CRITICAL 9.1
  • TI-2025-18169 Adobe Commerce | Incorrect Authorization (CWE-863) CVSS 3.1CRITICAL 9.1
See all 213 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences