Skip to content

Adobe Magento Open Source vulnerabilities

adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34648EPSS 21.4%7.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34649EPSS 13.6%7.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-346554.8 MediumMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)CVE-2026-346545.3 MediumMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-346517.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-346467.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-212935.5 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212914.8 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-212825.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212865.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-212945.5 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212848.1 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212974.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213594.7 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213097.5 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212925.4 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-213105.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212854.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212908.7 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212897.5 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213618.1 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-213606.8 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212964.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213118.0 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)CVE-2026-212953.1 LowMarch 11, 2026
adobe commerce, commerce and magento open source, commerce webhooks +1 more +3 moreXXE can expose crypt key and other secrets granting full admin accessCVE-2024-34102In KEVPublic exploitFix availableEPSS 100.0%9.8 CriticalJune 13, 2024
adobe commerce, commerce and magento open source, magento +1 more +3 moreAdobe Commerce checkout improper input validation leads to remote code executionCVE-2022-24086In KEVPublic exploitFix availableEPSS 99.2%9.8 CriticalFebruary 16, 2022