Lucene search
K

Magento Security feature bypass

๐Ÿ—“๏ธย 26 Jun 2025ย 21:31:13Reported byย GitHub Advisory DatabaseTypeย 
github
ย github
๐Ÿ”—ย github.com๐Ÿ‘ย 6ย Views

Magento 2.4.8 and earlier have an Incorrect Authorization flaw that can bypass security and grant limited unauthorized access with user interaction.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2025-49550
25 Jun 202517:52
โ€“circl
CNNVD
Adobe Commerce ๅฎ‰ๅ…จๆผๆดž
25 Jun 202500:00
โ€“cnnvd
CNVD
Adobe Commerce Incorrect Authorization Vulnerability (CNVD-2025-24442)
4 Jul 202500:00
โ€“cnvd
CVE
CVE-2025-49550
25 Jun 202517:41
โ€“cve
Cvelist
CVE-2025-49550 Adobe Commerce | Incorrect Authorization (CWE-863)
25 Jun 202517:41
โ€“cvelist
EUVD
EUVD-2025-19132
3 Oct 202520:07
โ€“euvd
NCSC
Vulnerabilities fixed in Adobe Commerce
30 Jun 202512:59
โ€“ncsc
NVD
CVE-2025-49550
25 Jun 202518:15
โ€“nvd
OSV
GHSA-8HCX-XVWW-6C6H Magento Security feature bypass
26 Jun 202521:31
โ€“osv
Positive Technologies
PT-2025-26871 ยท Adobe ยท Commerce
10 Jun 202500:00
โ€“ptsecurity
Rows per page
Vulners
Node
OROROROR
magentocommunity-editionRange<2.4.5-p13composer
OR
magentocommunity-editionRange2.4.6-p1โ€“2.4.6-p11composer
OR
magentocommunity-editionRange2.4.7-beta1โ€“2.4.7-p6composer
OR
magentoproject-community-editionRangeโ‰ค2.0.2composer

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Oct 2025 21:04Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.14.3
EPSS0.00468
SSVC
6