CB
Product
Commerce B2b
On CISA KEVExploited in the wild
141
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 57Medium 62Low 13
Watch
Add Commerce B2b to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-49556 | 7.5 | Aug 12 | Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2025-49554 | 7.5 | Aug 12 | Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2025-24406 | 7.5 | Feb 11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more |
| CVE-2026-34647 | 7.4 | May 12 | Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2026-48412 | 7.2 | Aug 11 | Adobe Commerce | Incorrect Authorization (CWE-863) Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more |
| CVE-2026-47992 | 7.2 | Jul 14 | Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more |
| CVE-2025-24407 | 7.1 | Feb 11 | Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more |