CVE-2026-48415
HighCVSS 7.6Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability. Exploitation does not require user interaction.
Risk Assessment
The risk includes unauthorized read and write access to data, which could lead to content modification or data integrity compromise. Additionally, limited availability disruption may occur. The lack of user interaction increases the risk of automated attacks.
Recommendation
It is recommended to immediately apply patches from Adobe for Adobe Commerce. Also restrict user privileges and monitor activities of low-privileged accounts.
Original NVD description (English source)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.