CVE-2026-47996
HighCVSS 7.6Exploitation Probability (EPSS)
Very high risk97th percentile - higher than 97% of all known CVEs
Summary
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction and the scope is changed.
Risk Assessment
The risk involves a high-privileged attacker gaining unauthorized read access to sensitive data, potentially compromising system confidentiality and integrity, leading to information disclosure.
Recommendation
It is recommended to immediately apply security patches provided by Adobe for Adobe Commerce. Additionally, review and restrict privileges for high-privileged users.
Original NVD description (English source)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.