Adobe Adobe Commerce

• CVE-2026-34652 High 7.5 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) 0.5%
• CVE-2026-34645 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-34648 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 21.4%
• CVE-2026-34649 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 13.6%
• CVE-2026-34655 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-34654 Medium 5.3 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) 0.6%
• CVE-2026-34651 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 0.7%
• CVE-2026-34646 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-21291 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2026-21293 Medium 5.5 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) 0.3%
• CVE-2026-21282 Medium 5.3 Adobe Commerce | Improper Input Validation (CWE-20) 0.6%
• CVE-2026-21286 Medium 5.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.3%
• CVE-2026-21294 Medium 5.5 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) 0.3%
• CVE-2026-21284 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-21297 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-21359 Medium 4.7 Adobe Commerce | Incorrect Authorization (CWE-863) 0.2%
• CVE-2026-21309 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-21292 Medium 5.4 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2026-21310 Medium 5.3 Adobe Commerce | Improper Input Validation (CWE-20) 0.3%
• CVE-2026-21285 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.3%
• CVE-2026-21290 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.5%
• CVE-2026-21289 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-21361 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.5%
• CVE-2026-21360 Medium 6.8 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.7%
• CVE-2026-21296 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-21311 High 8.0 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-21295 Low 3.1 Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) 0.3%
• CVE-2025-54267 Medium 6.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2025-54266 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2025-54263 High 8.1 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2025-54265 Medium 5.9 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2025-54264 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.6%
• CVE-2025-49556 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2025-49557 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.7%
• CVE-2025-49558 Medium 5.9 Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) 0.5%
• CVE-2025-49554 High 7.5 Adobe Commerce | Improper Input Validation (CWE-20) 0.6%
• CVE-2025-49559 Medium 5.3 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.7%
• CVE-2025-49555 High 8.1 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) 1.0%
• CVE-2025-49550 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2025-49549 Low 2.7 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2025-27206 Medium 5.3 Adobe Commerce | Improper Access Control (CWE-284) 0.5%
• CVE-2025-43586 High 8.1 Adobe Commerce | Improper Access Control (CWE-284) 0.6%
• CVE-2025-47110 High 8.4 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.8%
• CVE-2025-27207 Medium 6.5 Adobe Commerce | Improper Access Control (CWE-284) 0.5%
• CVE-2025-43585 High 8.2 Adobe Commerce | Improper Authorization (CWE-285) 0.6%
• CVE-2025-27190 Medium 5.3 Adobe Commerce | Improper Access Control (CWE-284) 0.6%
• CVE-2025-27191 Medium 5.3 Adobe Commerce | Improper Access Control (CWE-284) 0.5%
• CVE-2025-27192 Low 2.7 Adobe Commerce | Insufficiently Protected Credentials (CWE-522) 0.5%
• CVE-2025-27188 Medium 4.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2025-27189 Medium 4.3 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352) 1.0%