CVE-2026-48001
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control and does not require user interaction.
Risk Assessment
The risk involves potential leakage of confidential information, which may compromise customer data or store configuration security. An attacker can exploit this vulnerability without active user involvement.
Recommendation
It is recommended to immediately update Adobe Commerce to the latest version containing the security patch. Also monitor system logs for unusual access attempts.
Original NVD description (English source)
Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.