Vulnerabilities in Adobe Commerce

🗓️ 09 Sep 2026 13:34:37Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 18 Views

Stored XSS, auth bypass, and path traversal in Adobe Commerce enable privilege escalation.

Reporter	Title	Published	Views	Family All 71
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit this to enhance their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to exploit this to enhance their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.	9 Sep 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect pathname restrictions in the catalog. This allows attackers to bypass security restrictions.	9 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-76200	8 Sep 202620:14	–	circl
Circl	CVE-2026-76201	8 Sep 202620:14	–	circl

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb26-138.html

09 Sep 2026 13:34Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.3

EPSS0.01094

SSVC

Adobe Commerce Stored XSS Privilege Escalation Path Traversal Auth Bypass Remote Exploitation