Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts

🗓️ 10 Sep 2025 01:08:00Reported by The Hacker NewsType

Adobe warns of CVE-2025-54236 SessionReaper, a flaw enabling customer account takeover via Commerce.

Reporter	Title	Published	Views	Family All 50
GithubExploit	Exploit for Improper Input Validation in Adobe Commerce	19 Mar 202614:44	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Adobe Commerce	24 May 202616:08	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Adobe Commerce	6 Nov 202509:38	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Adobe Commerce	30 Dec 202506:38	–	githubexploit
Tenable Nessus	Adobe Commerce/Magento Open Source Improper Input Validation (APSB25-88)	23 Sep 202500:00	–	nessus
Tenable Nessus	Adobe Commerce B2B Improper Input Validation (APSB25-88)	23 Sep 202500:00	–	nessus
Tenable Nessus	Adobe Commerce / Magento Insecure Deserialization (SessionReaper)	24 Oct 202500:00	–	nessus
Akamai Blog	The Grim SessionReaper (CVE-2025-54236) Comes to Collect for Halloween	27 Oct 202505:00	–	akamaiblog
Adobe	APSB25-88 : Security update available for Adobe Commerce	9 Sep 202500:00	–	adobe
BDU FSTEC	The vulnerability of the Siemens User Management Component (UMC) in the web-based control system for technological processes of SIMATIC PCS neo allows a hacker to execute arbitrary code.	10 Sep 202500:00	–	bdu_fstec