Adobe Magento Open Source

• CVE-2026-75650 Critical 10.0 Exploited Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) 34.7%
• CVE-2026-71362 Critical 9.1 Exploited Adobe Commerce | Incorrect Authorization (CWE-863) 90.5%
• CVE-2026-48356 Critical 9.3 Exploited Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) 47.5%
• CVE-2026-95631 High 8.7 Adobe Commerce | Improper Input Validation (CWE-20) 0.9%
• CVE-2026-103849 Critical 10.0 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) 1.2%
• CVE-2026-92910 High 7.2 Adobe Commerce | Incorrect Authorization (CWE-863) 0.4%
• CVE-2026-91013 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.9%
• CVE-2026-92464 Critical 9.1 Adobe Commerce | Improper Input Validation (CWE-20) 0.9%
• CVE-2026-95630 Medium 4.3 Adobe Commerce | Improper Input Validation (CWE-20) 0.5%
• CVE-2026-92922 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.9%
• CVE-2026-92908 High 8.3 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-92909 Critical 9.8 Adobe Commerce | Incorrect Authorization (CWE-863) 0.8%
• CVE-2026-100133 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 1.0%
• CVE-2026-92911 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.9%
• CVE-2026-76200 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.7%
• CVE-2026-76201 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.7%
• CVE-2026-77109 High 8.6 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-77110 High 7.6 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 1.1%
• CVE-2026-77108 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.8%
• CVE-2026-76202 High 8.2 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-77774 High 8.6 Adobe Commerce | Incorrect Authorization (CWE-863) 0.8%
• CVE-2026-77111 High 8.7 Adobe Commerce | Incorrect Authorization (CWE-863) 0.8%
• CVE-2026-48414 High 7.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2026-48416 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.8%
• CVE-2026-48413 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.7%
• CVE-2026-48415 High 7.6 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-48412 Low 2.7 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-48411 Medium 6.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%
• CVE-2026-47984 High 8.2 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-47997 Medium 5.9 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-47988 High 8.6 Adobe Commerce | Incorrect Authorization (CWE-863) 0.8%
• CVE-2026-47999 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-48358 Critical 9.1 Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) 1.2%
• CVE-2026-47998 Medium 5.9 Adobe Commerce | Incorrect Authorization (CWE-863) 0.7%
• CVE-2026-48000 Medium 6.1 Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) 0.5%
• CVE-2026-47995 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.7%
• CVE-2026-48001 Low 3.7 Adobe Commerce | Information Exposure (CWE-200) 0.5%
• CVE-2026-48371 Medium 5.4 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-47996 Medium 6.8 Adobe Commerce | Incorrect Authorization (CWE-863) 0.9%
• CVE-2026-47994 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.7%
• CVE-2026-47992 High 7.2 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) 1.0%
• CVE-2026-34656 Medium 4.3 Adobe Commerce | Improper Authorization (CWE-285) 0.4%
• CVE-2026-34658 Medium 4.8 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.3%
• CVE-2026-34650 High 7.5 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) 15.1%
• CVE-2026-34686 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 0.4%
• CVE-2026-34647 High 7.4 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) 0.7%
• CVE-2026-34685 Low 3.4 Adobe Commerce | Improper Input Validation (CWE-20) 0.4%
• CVE-2026-34653 High 8.7 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) 0.6%
• CVE-2026-34652 High 7.5 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) 0.5%
• CVE-2026-34645 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) 0.6%