CVE
CVE-2026-48358
- First Reported
- Jul 14, 2026
- Latest Reported
- Jul 16, 2026
CVE Enrichment
- CVSS
- 9.1 CRITICAL
- EPSS
- 1.21%
- EPSS Percentile
- 68.16%
- CISA KEV
- Not listed
Description
Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 15-Jul-2026 03:17
- Last Modified
- 28-Aug-2026 07:17
- EPSS Date
- 2026-10-27
- CWE
- CWE-116
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:H /
UI:N /
S:C /
C:H /
I:H /
A:H
Affected Products / Versions
- adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.4
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.5
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p15:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.6
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p10:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.7
cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.8
cpe:2.3:a:adobe:commerce:2.4.8:p5:*:*:*:*:*:* - adobe / commerce
Version / affected range: 2.4.9
cpe:2.3:a:adobe:commerce:2.4.9:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p18:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.3
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p17:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.3.4
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p10:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.4.2
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.2
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p5:*:*:*:*:*:* - adobe / commerce_b2b
Version / affected range: 1.5.3
cpe:2.3:a:adobe:commerce_b2b:1.5.3:-:*:*:*:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p15:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.6
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p10:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.7
cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.8
cpe:2.3:a:adobe:magento:2.4.8:p5:*:*:open_source:*:*:* - adobe / magento
Version / affected range: 2.4.9
cpe:2.3:a:adobe:magento:2.4.9:-:*:*:open_source:*:*:* - adobe / i\/o_events
Version / affected range: * · from (inclusive) 1.6.0 · before (exclusive) 1.21.0
cpe:2.3:a:adobe:i\/o_events:*:*:*:*:*:commerce:*:*
References
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (2)
- CVE-2026-48358 (CVSS score: 9.1) – An improper encoding or escaping of output vulnerability in Adobeâ¯Commerce andâ¯Magento Open Source that could lead to arbitrary code execution Mozilla, Google, Adobe and Broadcom Patch Critical Security Flaws
- On Tuesday, Adobe also resolved 13 vulnerabilities in Commerce, including two critical-severity bugs. Tracked as CVE-2026-48356 and CVE-2026-48358, they could lead to privilege escalation and arbitrary code execution. Adobe Patches 88 Vulnerabilities Across 12 Products, Including Critical ColdFusion Flaws
CVE (17)
People (1)
Vendors (4)
Products (8)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.