Skip to contentMagento vulnerabilities
Newest
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34648EPSS 21.4%7.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-34649EPSS 13.6%7.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-346554.8 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)CVE-2026-346545.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)CVE-2026-346517.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-346467.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-212935.5 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212914.8 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-212825.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212865.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)CVE-2026-212945.5 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212848.1 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212974.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213594.7 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-213097.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212925.4 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Input Validation (CWE-20)CVE-2026-213105.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212854.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-212908.7 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212897.5 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213618.1 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)CVE-2026-213606.8 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-212964.3 Medium
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-213118.0 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)CVE-2026-212953.1 Low
- adobe commerce, magento +1 moreMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code ExecutionCVE-2021-36036Fix available7.2 High
- adobe commerce, magento +1 moreMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code ExecutionCVE-2021-36021Fix available7.2 High
- adobe commerce, magento +1 moreMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code ExecutionCVE-2021-36023Fix available9.1 Critical
- adobe commerce, magento +1 more[CVE-2021-36032] Magento IDOR Leads to Account TakeoverCVE-2022-42344Fix available8.8 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Security feature bypassCVE-2022-34259Fix available5.3 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-34257Fix available6.1 Medium
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce XML Injection Arbitrary code executionCVE-2022-34253Fix available9.1 Critical
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Access Control Privilege escalationCVE-2022-34255Fix available8.8 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code executionCVE-2022-34254Fix available8.5 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Improper Authorization Privilege escalationCVE-2022-34256Fix available7.5 High
- adobe commerce, magento commerce, magento +2 moreAdobe Commerce Stored XSS Arbitrary code executionCVE-2022-34258Fix availableEPSS 69.9%4.8 Medium
- adobe magento commerce, magento +1 moreMagento Commerce improper authorization allows an authenticated user to perform certain functions without permissionCVE-2021-28567Fix available5.0 Medium
- adobe magento commerce, magento +1 moreMagento Commerce information disclosure during upload action leveraging a specially crafted fileCVE-2021-28566Fix available3.7 Low
- adobe magento commerce, magento +1 moreMagento Commerce path traversal vulnerability in child theme store creationCVE-2021-28584Fix available5.4 Medium
- adobe magento commerce, magento +1 moreMagento Commerce improper input validation in customer customer webapiCVE-2021-28585Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce insecure storage of sensitive documentationCVE-2021-28583Fix available7.5 High
- adobe magento commerce, magento +1 moreMagento Commerce improper Authorization via the 'Create Customer' endpointCVE-2021-28563Fix available6.5 Medium
- adobe magento commerce, magento +1 moreMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript executionCVE-2021-28556Fix available6.9 Medium
- magento upward connector, adobe magento commerce, magento upward php +2 moreMagento UPWARD-php Path traversal vulnerability via UPWARD ConnectorCVE-2021-210644.9 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code ExecutionCVE-2021-21014Public exploitFix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code ExecutionCVE-2021-21016Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessCVE-2021-21032Fix available5.6 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript ExecutionCVE-2021-21029Fix availableEPSS 85.2%4.8 Medium
- adobe magento commerce, magento +1 moreMagento Commerce XML Injection Could Lead To Arbitrary Code ExecutionCVE-2021-21025Fix available9.1 Critical
- magento, adobe magento commerce +1 moreMagnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code ExecutionCVE-2021-21018Fix available9.1 Critical
- Show moreLoading…