CVE
CVE-2025-54236
- First Reported
- Oct 26, 2026
- Latest Reported
- Oct 26, 2026
CVE Enrichment
- CVSS
- 9.1 CRITICAL
- EPSS
- 94.66%
- EPSS Percentile
- 99.86%
- CISA KEV
- YES — Known Exploited Vulnerability
Description
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 09-Sep-2025 21:15
- Last Modified
- 17-Jun-2026 16:39
- EPSS Date
- 2026-10-26
- CWE
- CWE-20
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:N /
S:U /
C:H /
I:H /
A:N
CISA KEV Details
- Date Added
- 2025-10-24
- Remediation Due
- 2025-11-14
- Known Ransomware Campaign Use
- Unknown
- Required Action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Notes
- https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54236
Affected Products / Versions
- adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.9
cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.9
cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.3
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.3
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.5
cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.9
cpe:2.3:a:adobe:magento:2.4.9:alpha1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.9
cpe:2.3:a:adobe:magento:2.4.9:alpha2:*:*:open_source:*:*:*
References
- [email protected]
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- 134c704f-9b21-4f2e-91b3-4a467353bcc0
- CISA Advisory
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (2)
- vulnerability. Another 102 stores saw files uploaded through the PolyShell or SessionReaper (aka CVE-2025-54236) vulnerabilities. Scanner-Evading JavaScript Campaign Targets 953 Online Stores, Mostly Magento
- Sansec also found over 100 stores that had files uploaded through the PolyShell or SessionReaper (CVE-2025-54236) flaws. Sansec Reports 953 Online Stores Hit by Long-Running Loader Campaign
CVE (3)
People (1)
MITRE ATT&CK (4)
Vendors (2)
Products (5)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.