CVE-2026-48416
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation does not require user interaction.
Risk Assessment
The risk is the potential for unauthorized reading of sensitive data, which could lead to information disclosure. The lack of required user interaction increases the risk of automated attacks.
Recommendation
It is recommended to immediately apply patches provided by Adobe for Adobe Commerce. Also regularly review access logs to detect unauthorized read attempts.
Original NVD description (English source)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.