Login Request a demo
AC
Product
Adobe Commerce B2B
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
56
CVEs
3
On KEV
10.0
Max CVSS
11
New 30D
Vulnerabilities56In the news11Timeline
Severity mix
Critical 11High 31Medium 12Low 2
Severity
All severities56Critical11High31Medium12Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Adobe Commerce B2B to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47996
6.8
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-48000
6.1
0%
Jul 14
Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-47997
5.9
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-47998
5.9
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-48371
5.4
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-34654
5.3
1%
May 12
Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-48411
4.9
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 1.5.3-2026-jul, 1.5.2-2026-jul, 1.4.2-2026-jul, 1.3.4-2026-jul, 1.3.3-2026-jul
CVE-2026-47999
4.8
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18
CVE-2026-34658
4.8
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-34655
4.8
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
CVE-2026-95630
4.3
0%
Oct 13
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep
CVE-2026-34656
4.3
0%
May 12
Adobe Commerce | Improper Authorization (CWE-285)
Affected: through 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17
Showing 12