Adobe Adobe Commerce vulnerabilities

210 published CVEs name Adobe Adobe Commerce among the affected products; CISA lists 5 of them as exploited in the wild.

Critical 22High 83Medium 90Low 15Not scored 0

CVEs per yearBy the year they were published

CVE-2026-48356
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · Adobe Commerce
ExploitedCritical9.3
CVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
ExploitedCritical9.1
CVE-2026-75650
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce
ExploitedCritical10.0
CVE-2025-54236
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
ExploitedCritical9.1
CVE-2024-34102
XXE can expose crypt key and other secrets granting full admin access
Adobe · Adobe Commerce
ExploitedCritical9.8

CVE-2026-95631
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
High8.7
CVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce
Critical10.0
CVE-2026-92910
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
High7.2
CVE-2026-91013
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe · Adobe Commerce
Critical9.3
CVE-2026-92464
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
Critical9.1
CVE-2026-95630
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
Medium4.3
CVE-2026-92922
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe · Adobe Commerce
High8.1
CVE-2026-92908
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
High8.3
CVE-2026-92909
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
Critical9.8
CVE-2026-100133
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe · Adobe Commerce
Critical9.3