CVE Catalog

CVE-2026-71362

CriticalCVSS 9.1
Published: Translated: NVD NIST

Summary

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.

Risk Assessment

The risk includes privilege escalation, potentially leading to unauthorized access to sensitive data and administrative functions.

Recommendation

It is recommended to apply patches provided by Adobe and regularly review permissions.

Original NVD description (English source)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS