Magento / Adobe Commerce vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
91 matching records
- Critical9.8Out-of-Bounds Write in Google Brotli DecoderPatch nowKEVEPSS 82.64%Oct 22, 2026
- High8.1Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vul…Check if you run itEPSS 0.90%Oct 13, 2026
- High8.7Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vuln…Check if you run itEPSS 0.86%Oct 13, 2026
- High7.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.41%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.89%Oct 13, 2026
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 1.05%Oct 13, 2026
- High8.7Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.86%Oct 13, 2026
- Critical10.0Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context ofCheck if you run itEPSS 1.17%Oct 13, 2026
- Critical9.1Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.87%Oct 13, 2026
- High8.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.60%Oct 13, 2026
- Critical9.8Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.79%Oct 13, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityPatch nowKEVEPSS 90.49%Aug 11, 2026
- High8.2Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.73%Jul 14, 2026
- Medium5.9Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.71%Jul 14, 2026
- High8.6Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.76%Jul 14, 2026
- Medium4.8Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Check if you run itEPSS 0.41%Jul 14, 2026
- Critical9.1Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)Check if you run itEPSS 1.21%Jul 14, 2026
- Critical9.3Adobe commerce Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 44.58%Jul 14, 2026
- Medium5.9Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.71%Jul 14, 2026
- Medium6.1Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)Check if you run itEPSS 0.46%Jul 14, 2026
- High8.1Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Check if you run itEPSS 0.71%Jul 14, 2026
- Low3.7Adobe Commerce | Information Exposure (CWE-200)Check if you run itEPSS 0.51%Jul 14, 2026
- Medium5.4Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)Check if you run itEPSS 0.39%Jul 14, 2026
- Medium6.8Adobe Commerce | Incorrect Authorization (CWE-863)Check if you run itEPSS 0.88%Jul 14, 2026