Magento vulnerabilities

Products

• Magento 221
• Open Source 76

Newest

• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Improper Input Validation (CWE-20) CVE-2026-95631 8.7 HighOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) CVE-2026-103849 Public exploitFix available 10.0 CriticalOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-92910 7.2 HighOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Improper Input Validation (CWE-20) CVE-2026-92464 9.1 CriticalOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-91013 9.3 CriticalOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Improper Input Validation (CWE-20) CVE-2026-95630 4.3 MediumOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-92922 8.1 HighOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-92909 Fix available 9.8 CriticalOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-92908 8.3 HighOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-100133 9.3 CriticalOctober 13, 2026
• adobe commerce, commerce b2b, magento open source +1 more +3 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-92911 8.7 HighOctober 13, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-76201 9.3 CriticalSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-76200 9.3 CriticalSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-77109 8.6 HighSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE-2026-77110 7.6 HighSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-77108 7.5 HighSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-76202 8.2 HighSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-77774 8.6 HighSeptember 8, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-77111 8.7 HighSeptember 8, 2026
• adobe commerce, commerce b2b, commerce and magento +3 more +5 more Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) CVE-2026-75650 In KEVPublic exploitFix available EPSS 34.7% 10.0 CriticalSeptember 7, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-48416 7.5 HighAugust 11, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-48414 7.7 HighAugust 11, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-48413 8.7 HighAugust 11, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-48415 7.6 HighAugust 11, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-48412 2.7 LowAugust 11, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-48411 6.5 MediumAugust 11, 2026
• adobe commerce, commerce b2b, commerce and magento +3 more +5 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-71362 In KEVPublic exploitFix available EPSS 90.5% 9.1 CriticalAugust 11, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-47984 8.2 HighJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-47997 5.9 MediumJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-47988 8.6 HighJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-47999 4.8 MediumJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) CVE-2026-48358 9.1 CriticalJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +5 more +7 more Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) CVE-2026-48356 In KEVPublic exploit EPSS 47.5% 9.3 CriticalJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-47998 5.9 MediumJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) CVE-2026-48000 6.1 MediumJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Information Exposure (CWE-200) CVE-2026-48001 3.7 LowJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-47995 8.1 HighJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-48371 5.4 MediumJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-47996 6.8 MediumJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-47994 8.7 HighJuly 14, 2026
• adobe commerce, commerce b2b, commerce events +4 more +6 more Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) CVE-2026-47992 7.2 HighJuly 14, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Improper Authorization (CWE-285) CVE-2026-34656 4.3 MediumMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-34658 4.8 MediumMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) CVE-2026-34650 EPSS 15.1% 7.5 HighMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2026-34686 8.7 HighMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) CVE-2026-34647 7.4 HighMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Improper Input Validation (CWE-20) CVE-2026-34685 3.4 LowMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CVE-2026-34653 8.7 HighMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) CVE-2026-34652 7.5 HighMay 12, 2026
• adobe commerce, commerce b2b, magento +2 more +4 more Adobe Commerce | Incorrect Authorization (CWE-863) CVE-2026-34645 7.5 HighMay 12, 2026
• Show olderLoading…