Adobe Magento Open Source vulnerabilities
75 published CVEs name Adobe Magento Open Source among the affected products; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 75
- Last 12 months
- 75
- Critical
- 11
- Known exploited
- 3
Critical 11High 36Medium 24Low 4Not scored 0
Known exploitedNewest addition to KEV first
- CVE-2026-48356
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · Adobe Commerce
ExploitedCritical9.3 - CVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
ExploitedCritical9.1 - CVE-2026-75650
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce
ExploitedCritical10.0
Newest CVEs
- CVE-2026-95631
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
High8.7 - CVE-2026-103849
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce
Critical10.0 - CVE-2026-92910
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
High7.2 - CVE-2026-91013
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe · Adobe Commerce
Critical9.3 - CVE-2026-92464
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
Critical9.1 - CVE-2026-95630
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
Medium4.3 - CVE-2026-92922
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe · Adobe Commerce
High8.1 - CVE-2026-92908
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
High8.3 - CVE-2026-92909
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
Critical9.8 - CVE-2026-100133
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe · Adobe Commerce
Critical9.3