CVE-2026-48411Medium· 6.5▾ SunlitAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized w…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.9%
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
commerce = 2.4.4commerce = 2.4.5commerce = 2.4.6commerce = 2.4.7commerce = 2.4.8commerce = 2.4.9magento = 2.4.6magento = 2.4.7magento = 2.4.8magento = 2.4.9commerce_b2b = 1.3.3commerce_b2b = 1.3.4commerce_b2b = 1.3.5commerce_b2b = 1.4.2Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48415High· 7.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass
CVE-2026-48412Low· 2.7Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation
CVE-2026-71362Critical· 9.1Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation
CVE-2025-54267Medium· 6.5Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability
CVE-2025-54263High· 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability
CVE-2025-54265Medium· 5.9Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability