Login Request a demo
CO
E-commerce
Commerce
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
251
CVEs
6
On KEV
10.0
Max CVSS
11
New 30D
Vulnerabilities251In the news12Timeline
Severity mix
Critical 23High 104Medium 110Low 14
Severity
All severities251Critical23High104Medium110Low14
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-75650
In wildKEV
10.0
4%
Sep 7
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Affected: through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug
CVE-2024-34102
In wildKEV
9.8
100%
Jun 13
XXE can expose crypt key and other secrets granting full admin access
Affected: through 2.4.4-p8
CVE-2022-24086
In wildKEV
9.8
99%
Feb 16
Adobe Commerce checkout improper input validation leads to remote code execution
Affected: before 2.3.0; after 2.3.3 through 2.3.6; 2.4.0 through 2.4.2; 2.3.7; 2.3.7; 2.4.3; +1 more
CVE-2026-48356
In wildKEV
9.3
31%
Jul 14
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Affected: through 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18
CVE-2026-71362
In wildKEV
9.1
90%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul
CVE-2025-54236
In wildKEV
9.1
95%
Sep 9
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 2.4.4-p15
Showing 6