CVE-2026-75650 Adobe Adobe Commerce
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute…
- CVSS
- 10.0 Critical
- EPSS
- 99%
- Percentile
- 100
- Published
- 2026-09-07
- Force
- 11 of 12
- Public PoC
- 7
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
On CISA’s exploited list
Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
- Added
- 2026-09-08
- Federal patch deadline
- 2026-09-11
- Ransomware use
- not known