Adobe Commerce Security Bulletin APSB26-49: SSRF, RCE, XSS & Auth Bypass Fixes

helpx.adobe.com 2026-05-22 查看中文 →

Security Advisory APSB26-49 Critical Adobe

Affected:

Adobe Commerce 2.4.9-beta1
Adobe Commerce 2.4.8-p5
Adobe Commerce 2.4.7-p10
Adobe Commerce 2.4.6-p15
Adobe Commerce 2.4.5-p17

Fixed in:

Adobe Commerce 2.4.x Latest
Adobe Commerce B2B 2.4.x Latest
Magento Open Source 2.4.x Latest

Referenced CVEs: CVE-2026-34656 · 4.3 CVE-2026-34650 · 7.5 CVE-2026-34658 · 4.8 CVE-2026-34686 · 8.7 CVE-2026-34647 · 7.4 CVE-2026-34685 · 3.4 CVE-2026-34653 · 8.7 CVE-2026-34652 · 7.5 CVE-2026-34645 · 7.5 CVE-2026-34648 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from helpx.adobe.com, cleaned by our LLM pipeline, and translated to English. View original.

Goal Reached Thanks to every supporter — we hit 100%!

Adobe Commerce Security Bulletin APSB26-49: SSRF, RCE, XSS & Auth Bypass Fixes

More from this source