Magento
Adobe · 185 CVEs
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Sep 8, 2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Sep 8, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Sep 8, 2026
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Sep 8, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Sep 8, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Sep 8, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Sep 8, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Sep 8, 2026
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Sep 7, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Aug 11, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Jul 14, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Jul 14, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Jul 14, 2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Jul 14, 2026
Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)
Jul 14, 2026
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Jul 14, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Jul 14, 2026
Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Jul 14, 2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Jul 14, 2026
Adobe Commerce | Information Exposure (CWE-200)
Jul 14, 2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Jul 14, 2026
Adobe Commerce | Incorrect Authorization (CWE-863)
Jul 14, 2026
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Jul 14, 2026
Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Jul 14, 2026
Adobe Commerce | Improper Authorization (CWE-285)
May 12, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-76200 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | CRITICAL | 0.74% | Sep 8, 2026 |
| CVE-2026-76201 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | CRITICAL | 0.74% | Sep 8, 2026 |
| CVE-2026-77109 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.69% | Sep 8, 2026 |
| CVE-2026-77110 | Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) | HIGH | 1.09% | Sep 8, 2026 |
| CVE-2026-77108 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.82% | Sep 8, 2026 |
| CVE-2026-76202 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.67% | Sep 8, 2026 |
| CVE-2026-77774 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.83% | Sep 8, 2026 |
| CVE-2026-77111 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.84% | Sep 8, 2026 |
| CVE-2026-75650 KEV | Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | CRITICAL | 3.95% | Sep 7, 2026 |
| CVE-2026-71362 KEV | Adobe Commerce | Incorrect Authorization (CWE-863) | CRITICAL | 87.51% | Aug 11, 2026 |
| CVE-2026-47984 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.73% | Jul 14, 2026 |
| CVE-2026-47997 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM | 0.71% | Jul 14, 2026 |
| CVE-2026-47988 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH | 0.76% | Jul 14, 2026 |
| CVE-2026-47999 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM | 0.41% | Jul 14, 2026 |
| CVE-2026-48358 | Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) | CRITICAL | 1.21% | Jul 14, 2026 |
| CVE-2026-48356 | Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) | CRITICAL | 1.00% | Jul 14, 2026 |
| CVE-2026-47998 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM | 0.71% | Jul 14, 2026 |
| CVE-2026-48000 | Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) | MEDIUM | 0.46% | Jul 14, 2026 |
| CVE-2026-47995 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH | 0.71% | Jul 14, 2026 |
| CVE-2026-48001 | Adobe Commerce | Information Exposure (CWE-200) | LOW | 0.51% | Jul 14, 2026 |
| CVE-2026-48371 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM | 0.39% | Jul 14, 2026 |
| CVE-2026-47996 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM | 0.88% | Jul 14, 2026 |
| CVE-2026-47994 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH | 0.70% | Jul 14, 2026 |
| CVE-2026-47992 | Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | HIGH | 0.99% | Jul 14, 2026 |
| CVE-2026-34656 | Adobe Commerce | Improper Authorization (CWE-285) | MEDIUM | 0.59% | May 12, 2026 |
Showing 1 to 25 of 185 CVEs