Magento / Adobe Commerce security vulnerabilities
CMS / eCommerce / ERP. Public CVE monitoring for Magento / Adobe Commerce. Vendor security advisories are linked on this page.
Built for Operators of this product.
91 public records · 0 security-fix timeline events. 0 published in the last 7 days. 55 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 8
- High 5
- Medium 0
- Low 0
2026-08-0313 issues2026-10-31
Known exploited
View all known exploited- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 95.35%Sep 9, 2025
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 90.49%Aug 11, 2026
- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- Critical9.3Adobe commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 44.58%Jul 14, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 26.16%May 26, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026
Recently published
Browse catalog- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- High7.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.89%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 1.05%Oct 13, 2026
- High8.7Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.86%Oct 13, 2026
- Critical10.0Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context ofCheck if you run itEPSS 1.17%Oct 13, 2026
- Critical9.1Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.87%Oct 13, 2026
- High8.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.60%Oct 13, 2026
- Critical9.8Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.79%Oct 13, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026