Magento / Adobe Commerce vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

14 matching records

Critical9.8Out-of-Bounds Write in Google Brotli DecoderVuln · CVE-2026-111497 · Palo Alto Networks · WordPress · BSI CERT-Bund · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · Alpine, Alpine 3.21Patch nowKEVEPSS 82.64%Oct 22, 2026
Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityVuln · CVE-2026-75650 · Cloudflare · Commerce and Magento · CISA KEV · Cloudflare WAF rules · CVE.org · Adobe, MagentoPatch nowKEVEPSS 3.95%Sep 7, 2026
Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityVuln · CVE-2026-71362 · Adobe · Commerce and Magento · CISA KEV · CVE.org · FIRST EPSS · Adobe, MagentoPatch nowKEVEPSS 90.49%Aug 11, 2026
Critical9.3Adobe commerce Unrestricted Upload of File with Dangerous TypeIncident · CVE-2026-48356 · Adobe · Commerce and Magento · BSI CERT-Bund · Canadian Centre for Cyber Security · CISA Cybersecurity Advisories · Adobe, MagentoPatch nowKEVEPSS 44.58%Jul 14, 2026
Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityVuln · CVE-2026-45247 · Cloudflare · full page cache warmer · CISA KEV · Cloudflare WAF rules · CVE.org · MagentoPatch nowKEVEPSS 26.16%May 26, 2026
Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityVuln · CVE-2025-54236 · Cloudflare · Commerce and Magento · CISA KEV · Cloudflare WAF rules · CVE.org · Adobe, MagentoPatch nowKEVEPSS 95.35%Sep 9, 2025
Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityVuln · CVE-2024-34102 · Cloudflare · Commerce and Magento Open Source · CISA KEV · Cloudflare WAF rules · CVE.org · Adobe, MagentoPatch nowKEVEPSS 99.99%Jun 13, 2024
UnknownAdobe commerce Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2024-20720 · Adobe · commerce · CVE.org · FIRST EPSS · VulnCheck KEV · Adobe, MagentoPatch nowKEVEPSS 3.69%Apr 4, 2024
Critical9.8Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityVuln · CVE-2022-24086 · Adobe · Commerce and Magento Open Source · CISA KEV · CVE.org · FIRST EPSS · Adobe, MagentoPatch nowKEVEPSS 99.20%Feb 14, 2022
Unknownmagmi_project magmi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Vuln · CVE-2015-2067 · magmi_project · magmi · CVE.org · FIRST EPSS · Exploit Database · MagentoPatch nowKEVEPSS 38.46%Nov 22, 2020
Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2019-7139 · magento · magento · CVE.org · FIRST EPSS · VulnCheck KEV · Adobe, MagentoPatch nowKEVEPSS 22.24%Apr 2, 2019
Unknownmagento magento Improper Control of Generation of Code ('Code Injection')Vuln · CVE-2015-1399 · magento · magento · CVE.org · FIRST EPSS · VulnCheck KEV · Adobe, MagentoPatch nowKEVEPSS 9.74%Jan 22, 2016
Unknownmagento magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Vuln · CVE-2015-1398 · magento · magento · CVE.org · FIRST EPSS · VulnCheck KEV · Adobe, MagentoPatch nowKEVEPSS 13.93%Jan 22, 2016
Unknownmagento magento Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Vuln · CVE-2015-1397 · magento · magento · CVE.org · FIRST EPSS · Exploit Database · Adobe, MagentoPatch nowKEVEPSS 55.77%Jan 22, 2016

Sort