Lucene search
+L

2752 matches found

Cvelist
Cvelist
•added 2026/09/07 8:17 p.m.•109 views

CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS0.03949EPSS
SaveExploits3References1
EUVD
EUVD
•added 2026/09/07 8:17 p.m.•16 views

EUVD-2026-72530

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS9.1AI score0.03949EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
•added 2026/09/07 8:17 p.m.•14 views

CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS9AI score0.03949EPSS
SaveExploits3References1
OSV
OSV
•added 2026/09/07 8:17 p.m.•18 views

CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS6.9AI score
SaveExploits0References4
CVE
CVE
•added 2026/09/07 8:17 p.m.•159 views

CVE-2026-75650

Adobe Commerce (Magento) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability (CWE-1336) that allows arbitrary code execution in the context of the current user without requiring user interaction. The CVSS 3.1 score is 10.0 (CRITICAL) with a change...

10CVSS9AI score0.03949EPSS
SaveIn wildExploits3References2Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2026/09/07 12:00 a.m.•44 views

VulnCheck KEV: CVE-2026-75650

Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code...

10CVSS8.8AI score0.03949EPSS
SaveIn wildExploits3References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/07 12:00 a.m.•4 views

CVE-2026-75650: Improper Neutralization of Special Elements Used in a Template Engine

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue...

10CVSS9.1AI score0.03949EPSS
SaveExploits3References3
Adobe
Adobe
•added 2026/09/07 12:00 a.m.•200 views

APSB26-146 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves a critical vulnerability that could result in arbitrary code execution...

6.5AI score
SaveExploits0Affected Software3
The Hacker News
The Hacker News
•added 2026/09/05 8:14 p.m.•14 views

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the fl...

6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•23 views

PT-2026-86916

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4 through 2.4.9-2026-aug Magento Open Source versions 2.4.4 through 2.4.9-2026-aug Adobe Commerce B2B versions 1.3.3 through 1.5.3-2026-aug Description Adobe Commerce, Magento Open Source, and Adobe Commerce B2B are...

10CVSS8.2AI score0.03949EPSS
SaveExploits3References153
VulnCheck KEV
VulnCheck KEV
•added 2026/09/03 12:00 a.m.•14 views

VulnCheck KEV: CVE-2026-71362

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction...

9.1CVSS8.5AI score0.87507EPSS
SaveIn wildExploits1References4
Nuclei
Nuclei
•added 2026/08/25 6:03 a.m.•344 views

Adobe Commerce & Magento - CosmicSting

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary code execution. id: CVE-2024-34102 info: name: Adobe Commerce & Magento - CosmicSting author:...

9.8CVSS8.5AI score0.99994EPSS
SaveExploits26References2
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•12 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

8.5CVSS5.5AI score0.00632EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•15 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

8CVSS5.5AI score0.00459EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•63 views

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, arises due to deficiencies in authentication mechanisms, allowing attackers to increase their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

9.4CVSS6.5AI score0.87507EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•17 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms. This allows attackers to bypass existing security measures.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass existing security...

7.8CVSS5.5AI score0.00829EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•28 views

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, arises from deficiencies in authentication mechanisms, allowing attackers to escalate their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

4CVSS5.5AI score0.00558EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•14 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

7.7CVSS6AI score0.00332EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/08/19 12:00 a.m.•11 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to execute arbitrary code.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

8.7CVSS6AI score0.00699EPSS
SaveExploits0References4Affected Software3
GithubExploit
GithubExploit
•added 2026/08/15 2:21 p.m.•66 views

Exploit for CVE-2026-71362

CVE-2026-71362 — Magento / Adobe Commerce customer-session ide...

9.1CVSS6.1AI score0.87507EPSS
SaveExploits1
Rows per page
Query Builder