CVE-2026-48412
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction.
Risk Assessment
An attacker with already high privileges could gain access to even more sensitive resources, potentially leading to data breach or system compromise.
Recommendation
Apply patches provided by Adobe for Adobe Commerce to fix the incorrect authorization vulnerability.
Original NVD description (English source)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction.