#magento

2 articles

Security Alerts Sep 24, 2026

CVE-2026-71362: Privilege Escalation in Adobe Commerce and Magento

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user...

Security Alerts Sep 8, 2026

CVE-2026-75650: Critical Adobe Commerce and Magento Flaw — CVSS 10, No User Interaction

A template engine injection in Adobe Commerce allows arbitrary code execution with no user interaction at all. CVSS 10.0, actively exploited, CISA deadline 11 September...