CVE-2026-48356 Adobe Adobe Commerce
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or…
- CVSS
- 9.3 Critical
- EPSS
- 47%
- Percentile
- 99
- Published
- 2026-07-14
- Force
- 10 of 12
- Public PoC
- 3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
On CISA’s exploited list
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
- Added
- 2026-10-27
- Federal patch deadline
- 2026-11-10
- Ransomware use
- not known