CVE-2026-48411
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
Risk Assessment
An attacker with high privileges can gain unauthorized write access, potentially leading to data modification, injection of malicious content, or compromise of system integrity.
Recommendation
Apply patches provided by Adobe for Adobe Commerce to fix this vulnerability.
Original NVD description (English source)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.