Adobe Adobe Commerce Events
14 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-47984 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH 8.2 | 0.7 % | ||
| CVE-2026-47997 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-47988 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | HIGH 8.6 | 0.8 % | ||
| CVE-2026-47999 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM 4.8 | 0.4 % | ||
| CVE-2026-48358 | ≤ 1.20.0 | Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) | CRITICAL 9.1 | 1.2 % | ||
| CVE-2026-48356 | ≤ 1.20.0 | Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) | CRITICAL 9.3 | 31 % | KEV | |
| CVE-2026-47998 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM 5.9 | 0.7 % | ||
| CVE-2026-48000 | ≤ 1.20.0 | Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) | MEDIUM 6.1 | 0.5 % | ||
| CVE-2026-48001 | ≤ 1.20.0 | Adobe Commerce | Information Exposure (CWE-200) | LOW 3.7 | 0.5 % | ||
| CVE-2026-47995 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH 8.1 | 0.7 % | ||
| CVE-2026-48371 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-47996 | ≤ 1.20.0 | Adobe Commerce | Incorrect Authorization (CWE-863) | MEDIUM 6.8 | 0.9 % | ||
| CVE-2026-47994 | ≤ 1.20.0 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | HIGH 8.7 | 0.7 % | ||
| CVE-2026-47992 | ≤ 1.20.0 | Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | HIGH 7.2 | 1.0 % |