Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.8Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to a Restric…Vuln · CVE-2026-21360 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.6%Mar 11, 2026
Medium4.7Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21359 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.2%Mar 11, 2026
High8.0Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-21311 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…Vuln · CVE-2026-21310 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
High7.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21309 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.6%Mar 11, 2026
Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21297 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.4%Mar 11, 2026
Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21296 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
Low3.1Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redire…Vuln · CVE-2026-21295 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.2%Mar 11, 2026
Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Vuln · CVE-2026-21294 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.2%Mar 11, 2026
Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Vuln · CVE-2026-21293 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.2%Mar 11, 2026
Medium5.4Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-21292 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
Medium4.8Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-21291 · adobe · magento · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
High8.7Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-21290 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.5%Mar 11, 2026
High7.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21289 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.6%Mar 11, 2026
Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21286 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…Vuln · CVE-2026-21285 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.3%Mar 11, 2026
High8.1Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-21284 · adobe · commerce b2b · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.4%Mar 11, 2026
Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…Vuln · CVE-2026-21282 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.5%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…Vuln · CVE-2026-27266 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…Vuln · CVE-2026-27265 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject ma…Vuln · CVE-2026-27262 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…Vuln · CVE-2026-27257 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…Vuln · CVE-2026-27256 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…Vuln · CVE-2026-27255 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026
Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacke…Vuln · CVE-2026-27254 · adobe · experience manager · CVE.org · FIRST EPSS · NIST NVD · AdobeEPSS 0.4%Mar 11, 2026