Adobe Commerce Events vulnerabilities | LiveThreat CVE Feed

Product

Adobe Commerce Events

by Adobe · last CVE Jul 14, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.3

Max CVSS

New 30D

Vulnerabilities14 In the news1 Timeline

Severity mix

Critical 2High 5Medium 6Low 1

Severity

All severities14 Critical2 High5 Medium6 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Adobe Commerce Events to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-48356 In wildKEV	9.3	31%	Jul 14	Adobe Commerce \| Unrestricted Upload of File with Dangerous Type (CWE-434) Affected: through 1.20.0
CVE-2026-48358	9.1	1%	Jul 14	Adobe Commerce \| Improper Encoding or Escaping of Output (CWE-116) Affected: through 1.20.0
CVE-2026-47994	8.7	1%	Jul 14	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 1.20.0
CVE-2026-47988	8.6	1%	Jul 14	Adobe Commerce \| Incorrect Authorization (CWE-863) Affected: through 1.20.0
CVE-2026-47984	8.2	1%	Jul 14	Adobe Commerce \| Incorrect Authorization (CWE-863) Affected: through 1.20.0
CVE-2026-47995	8.1	1%	Jul 14	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 1.20.0
CVE-2026-47992	7.2	1%	Jul 14	Adobe Commerce \| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: through 1.20.0
CVE-2026-47996	6.8	1%	Jul 14	Adobe Commerce \| Incorrect Authorization (CWE-863) Affected: through 1.20.0
CVE-2026-48000	6.1	0%	Jul 14	Adobe Commerce \| URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) Affected: through 1.20.0
CVE-2026-47997	5.9	1%	Jul 14	Adobe Commerce \| Incorrect Authorization (CWE-863) Affected: through 1.20.0
CVE-2026-47998	5.9	1%	Jul 14	Adobe Commerce \| Incorrect Authorization (CWE-863) Affected: through 1.20.0
CVE-2026-48371	5.4	0%	Jul 14	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 1.20.0
CVE-2026-47999	4.8	0%	Jul 14	Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79) Affected: through 1.20.0
CVE-2026-48001	3.7	1%	Jul 14	Adobe Commerce \| Information Exposure (CWE-200) Affected: through 1.20.0