Skip to contentMagento Open Source vulnerabilities
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-956318.7 High
- adobe commerce, commerce b2b, magento open source +1 more +3 moreAdobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)CVE-2026-103849Public exploitFix available10.0 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-929107.2 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-924649.1 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-910139.3 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-956304.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-929228.1 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-92909Fix available9.8 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-929088.3 High
- adobe commerce, commerce b2b, magento open source +1 more +3 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-1001339.3 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-929118.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-762019.3 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-762009.3 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-771098.6 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-771107.6 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-771087.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-762028.2 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-777748.6 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-771118.7 High
- adobe commerce, commerce b2b, commerce and magento +3 more +5 moreAdobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)CVE-2026-75650In KEVPublic exploitFix availableEPSS 99.4%10.0 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-484167.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-484147.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-484138.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-484157.6 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-484122.7 Low
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-484116.5 Medium
- adobe commerce, commerce b2b, commerce and magento +3 more +5 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-71362In KEVPublic exploitFix availableEPSS 91.7%9.1 Critical
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479848.2 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479975.9 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479888.6 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479994.8 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Improper Encoding or Escaping of Output (CWE-116)CVE-2026-483589.1 Critical
- adobe commerce, commerce b2b, commerce events +5 more +7 moreAdobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)CVE-2026-48356In KEVPublic exploitEPSS 47.5%9.3 Critical
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479985.9 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)CVE-2026-480006.1 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Information Exposure (CWE-200)CVE-2026-480013.7 Low
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479958.1 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-483715.4 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-479966.8 Medium
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-479948.7 High
- adobe commerce, commerce b2b, commerce events +4 more +6 moreAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)CVE-2026-479927.2 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Authorization (CWE-285)CVE-2026-346564.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-346584.8 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34650EPSS 15.1%7.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-346868.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-346477.4 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-346853.4 Low
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-346538.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)CVE-2026-346527.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-346457.5 High
- Show olderLoading…