CVE
CVE-2026-48356
- First Reported
- Oct 26, 2026
- Latest Reported
- Oct 26, 2026
CVE Enrichment
- CVSS
- 9.3 CRITICAL
- EPSS
- 1.00%
- EPSS Percentile
- 62.60%
- CISA KEV
- Not listed
Description
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 15-Jul-2026 03:17
- Last Modified
- 28-Aug-2026 07:17
- EPSS Date
- 2026-10-26
- CWE
- CWE-434
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:R /
S:C /
C:H /
I:H /
A:N
Affected Products / Versions
- adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.9
cpe:2.3:a:adobe:commerce:2.4.9:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p18:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p17:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.3
cpe:2.3:a:adobe:commerce_b2b:1.5.3:-:*:*:*:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p15:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p10:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.9
cpe:2.3:a:adobe:magento:2.4.9:-:*:*:open_source:*:*:* - adobe / i\/o_events
Version / affected range: * · from (inclusive) 1.6.0 · before (exclusive) 1.21.0
cpe:2.3:a:adobe:i\/o_events:*:*:*:*:*:commerce:*:*
References
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (2)
- 471 Magento stores are estimated to have been injected with the loader through the PolyShell (aka CVE-2026-48356) vulnerability. Another 102 stores saw files uploaded through the PolyShell or SessionReaper (aka Scanner-Evading JavaScript Campaign Targets 953 Online Stores, Mostly Magento
- In March, 471 Magento stores were injected with the loader through the PolyShell (CVE-2026-48356) vulnerability. Sansec Reports 953 Online Stores Hit by Long-Running Loader Campaign
CVE (3)
People (1)
MITRE ATT&CK (4)
Vendors (2)
Products (5)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.