CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...

CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...

EUVD-2026-56844

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...

CVE-2026-71362

Adobe Commerce , Adobe Commerce B2B , and Magento Open Source are affected by an Incorrect Authorization (CWE-863) flaw in Magento\Customer\Controller\Account\Edit::execute(). A failed editPost request leaves attacker-controlled customer_form_data in the session; a subsequent GET /customer/accoun...

CVE-2026-58231

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by K. Sorrachat in WordPress Plugin Welcart e-Commerce versions = 2.11.31...

CVE-2026-58231

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

CVE-2026-58231 Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

CVE-2026-58231 Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

EUVD-2026-55999

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

CVE-2026-58231

An unauthenticated attacker can abuse a default authentication client in SAP Commerce Cloud's Data Hub Adapter to submit crafted input, enabling arbitrary code execution. CVSS 10.0; CIRCL confirms active exploitation. SAP patch note 3771065 provides fixes; IP Filter Set is a temporary workaround....

Watch out for fake TikTok Shops trying to steal your money

TikTok Shop is a real, functioning e-commerce feature built into the TikTok app, allowing users to buy goods without ever leaving TikTok. As it's grown in popularity, scammers have begun cloning its appearance.Storefronts that reproduce its look, its trust badges, and its category layout closely...

CVE-2026-58231: Improper Control of Generation of Code

SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. Successful exploitation could enable arbitrary code execution and compromise internal components, resulting in high...

PT-2026-70814

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Description An Incorrect Authorization issue allows an attacker with high privileges to achieve privilege escalation, granting elevated access to restricted resources. This process does not requir...

APSB26-92 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could result in security feature bypass, arbitrary code execution, and privilege escalation. Adobe is not aware of any...

PT-2026-70817

Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization flaw exists that allows a low-privileged remote attack...

PT-2026-70824

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions prior to 2026-aug Magento Open Source versions prior to 2026-aug Adobe Commerce B2B versions prior to 1.5.3–1.3.3-2026-aug Description An incorrect authorization issue exists in the authorization mechanism that fails to...

CVE-2026-71362: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction...

PT-2026-70104

Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud affected versions not specified Description An unauthenticated attacker can abuse a default authentication client by submitting specially crafted input to certain functions that lack sufficient validation. This flaw allows f...

CVE-2026-48415: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability...