Login Request a demo
AC
Product
Adobe Commerce B2B
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
11
New 30D
Vulnerabilities56In the news11Timeline
Severity mix
Critical 11High 31Medium 12Low 2
Severity
All severities56Critical11High31Medium12Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Adobe Commerce B2B to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-75650
In wildKEV
10.0
4%
Sep 7
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-48356
In wildKEV
9.3
31%
Jul 14
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-71362
In wildKEV
9.1
90%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-103849
10.0
1%
Oct 13
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-92909
9.8
1%
Oct 13
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-91013
9.3
1%
Oct 13
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-100133
9.3
1%
Oct 13
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-76200
9.3
1%
Sep 8
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-76201
9.3
1%
Sep 8
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-92464
9.1
1%
Oct 13
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-48358
9.1
1%
Jul 14
Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-95631
8.7
1%
Oct 13
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-92911
8.7
1%
Oct 13
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-77111
8.7
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-48414
8.7
0%
Aug 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-48413
8.7
1%
Aug 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-47994
8.7
1%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-34686
8.7
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34653
8.7
1%
May 12
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-77109
8.6
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-77774
8.6
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-47988
8.6
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-92908
8.3
1%
Oct 13
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-48415
8.3
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-76202
8.2
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-47984
8.2
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-92922
8.1
1%
Oct 13
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-47995
8.1
1%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-77110
7.6
1%
Sep 8
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-77108
7.5
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
CVE-2026-48416
7.5
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-34650
7.5
15%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34652
7.5
1%
May 12
Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34645
7.5
1%
May 12
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34648
7.5
21%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34649
7.5
14%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34651
7.5
1%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34646
7.5
0%
May 12
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34647
7.4
1%
May 12
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-92910
7.2
0%
Oct 13
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-48412
7.2
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-47992
7.2
1%
Jul 14
Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-47996
6.8
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-48000
6.1
0%
Jul 14
Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-47997
5.9
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-47998
5.9
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-48371
5.4
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-34654
5.3
1%
May 12
Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-48411
4.9
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-47999
4.8
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
Page 1 of 2 · 56 total
12