AC
Product
Adobe Commerce B2B
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
11
New 30D
Severity mix
Critical 11High 31Medium 12Low 2
Watch
Add Adobe Commerce B2B to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-34658 | 4.8 | May 12 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17 |
| CVE-2026-34655 | 4.8 | May 12 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17 |
| CVE-2026-95630 | 4.3 | Oct 13 | Adobe Commerce | Improper Input Validation (CWE-20) Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep |
| CVE-2026-34656 | 4.3 | May 12 | Adobe Commerce | Improper Authorization (CWE-285) Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17 |
| CVE-2026-48001 | 3.7 | Jul 14 | Adobe Commerce | Information Exposure (CWE-200) Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18 |
| CVE-2026-34685 | 3.4 | May 12 | Adobe Commerce | Improper Input Validation (CWE-20) Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17 |