CVE-2026-92910
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
Published Oct 13, 2026 · updated Oct 14, 2026
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · NIST NVD
Detected
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.
Oct 14, 2026 · NIST NVD
Updated
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.
Sources
- CVE.orgCVE-2026-92910
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-92910
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2026-92910
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does no
nvd.nist.gov