Adobe Adobe Commerce vulnerabilities
210 published CVEs name Adobe Adobe Commerce among the affected products; CISA lists 5 of them as exploited in the wild.
- 210Published CVEs210 of them scored
- 75Last 12 monthspublished in the last year
- 22Critical83 more rated high
- 5Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-48356
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Adobe · Adobe Commerce
ExploitedCritical9.3 - CVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe · Adobe Commerce
ExploitedCritical9.1 - CVE-2026-75650
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce
ExploitedCritical10.0 - CVE-2025-54236
Adobe Commerce | Improper Input Validation (CWE-20)
Adobe · Adobe Commerce
ExploitedCritical9.1 - CVE-2024-34102
XXE can expose crypt key and other secrets granting full admin access
Adobe · Adobe Commerce
ExploitedCritical9.8