Skip to contentAdobe Commerce Events vulnerabilities
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479848.2 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479975.9 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479888.6 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479994.8 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Improper Encoding or Escaping of Output (CWE-116)CVE-2026-483589.1 Critical
- adobe commerce, commerce b2b, commerce events +5 more +7 moreAdobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)CVE-2026-48356In KEVPublic exploitEPSS 47.5%9.3 Critical
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479985.9 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)CVE-2026-480006.1 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Information Exposure (CWE-200)CVE-2026-480013.7 Low
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479958.1 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-483715.4 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479966.8 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479948.7 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2026-479927.2 High