Commerce B2b vulnerabilities | LiveThreat CVE Feed

Product

Commerce B2b

by Adobe · last CVE Sep 8, 2026

On CISA KEVExploited in the wild

141

CVEs

On KEV

10.0

Max CVSS

New 30D

Vulnerabilities141 In the news11 Timeline

Severity mix

Critical 9High 57Medium 62Low 13

Severity

All severities141 Critical9 High57 Medium62 Low13

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Commerce B2b to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-27188	4.3	1%	Apr 8	Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +14 more
CVE-2025-24436	4.3	1%	Feb 11	Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security… Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.4; +8 more
CVE-2025-24435	4.3	1%	Feb 11	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege… Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.4; +8 more
CVE-2025-24423	4.3	1%	Feb 11	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24421	4.3	1%	Feb 11	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24420	4.3	1%	Feb 11	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24419	4.3	1%	Feb 11	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security… Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2024-45130	4.3	1%	Oct 10	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2024-45129	4.3	1%	Oct 10	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2024-45125	4.3	1%	Oct 10	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2024-45122	4.3	1%	Oct 10	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2024-45121	4.3	1%	Oct 10	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more