Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Adobe
Magento

Adobe Magento vulnerabilities

Known exploitedIn KEVPublic exploitFix available

adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34648EPSS 21.4%7.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34649EPSS 13.6%7.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-346554.8 MediumMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)CVE-2026-346545.3 MediumMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-346517.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-346467.5 HighMay 12, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-212935.5 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212914.8 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-212825.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212865.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-212945.5 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212848.1 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212974.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213594.7 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213097.5 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212925.4 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-213105.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212854.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212908.7 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212897.5 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213618.1 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-213606.8 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212964.3 MediumMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213118.0 HighMarch 11, 2026
adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)CVE-2026-212953.1 LowMarch 11, 2026
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-54267Fix available6.5 MediumOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-54266Fix available4.8 MediumOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-54263Fix available8.1 HighOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-54265Fix available5.9 MediumOctober 14, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-54264Fix available8.1 HighOctober 14, 2025
adobe commerce, commerce and magento, commerce b2b +1 more +3 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2025-54236In KEVPublic exploitEPSS 95.5%9.1 CriticalSeptember 9, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-49556Fix available7.5 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-49557Fix available8.7 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)CVE-2025-49558Fix available5.9 MediumAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2025-49554Fix available7.5 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2025-49559Fix available5.3 MediumAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)CVE-2025-49555Fix available8.1 HighAugust 12, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-49550Fix available4.3 MediumJune 25, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-49549Fix available2.7 LowJune 25, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-27206Fix available5.3 MediumJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-435868.1 HighJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-47110Fix available8.4 HighJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Authorization (CWE-285)CVE-2025-43585Fix available8.2 HighJune 10, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-27190Fix available5.3 MediumApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Improper Access Control (CWE-284)CVE-2025-27191Fix available5.3 MediumApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Insufficiently Protected Credentials (CWE-522)CVE-2025-27192Fix available2.7 LowApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-27188Fix available4.3 MediumApril 8, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2025-24414Fix available8.7 HighFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24437Fix available5.4 MediumFebruary 11, 2025
adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2025-24434Fix availableEPSS 17.2%9.1 CriticalFebruary 11, 2025
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open