Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Adobe Commerce — Vulnerabilities & Security Advisories 210

All 210 CVE vulnerabilities found in Adobe Commerce, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Adobe Commerce vendor and product under the general category of software weakness types. It collects a comprehensive list of security flaws, ranging from critical remote code execution risks to minor configuration issues, covering the time period from early 2019 through the present day. By examining this curated data, users can effectively track Adobe’s security advisories to stay informed about recent patch releases, understand the characteristics and impact of specific weakness classes prevalent in e-commerce platforms, and look up a detailed history of vulnerabilities affecting this specific product. This resource serves as a central reference for security professionals, developers, and system administrators who need to assess the risk posture of their Adobe Commerce deployments. The information includes details on affected versions, exploit availability, and remediation guidance where applicable. Reviewing these entries helps organizations prioritize their patching strategies and ensures that known security gaps are addressed promptly. The data is organized to facilitate easy searching by vulnerability identifier, severity score, or release date, allowing for efficient integration into vulnerability management workflows. Understanding the historical context of these weaknesses provides valuable insights into the evolution of security practices within the Adobe ecosystem and helps predict potential future risks based on past trends and patterns in code quality and dependency management.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2026-95631 Adobe Commerce | Improper Input Validation (CWE-20) CWE-20 8.7 High 2026-10-13
CVE-2026-92910 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.2 High 2026-10-13
CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) CWE-1336 10.0 Critical 2026-10-13
CVE-2026-91013 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 9.3 Critical 2026-10-13
CVE-2026-92464 Adobe Commerce | Improper Input Validation (CWE-20) CWE-20 9.1 Critical 2026-10-13
CVE-2026-92922 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.1 High 2026-10-13
CVE-2026-95630 Adobe Commerce | Improper Input Validation (CWE-20) CWE-20 4.3 Medium 2026-10-13
CVE-2026-92908 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.3 High 2026-10-13
CVE-2026-92909 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 9.8 Critical 2026-10-13
CVE-2026-100133 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 9.3 Critical 2026-10-13
CVE-2026-92911 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2026-10-13
CVE-2026-76200 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 9.3 Critical 2026-09-08
CVE-2026-76201 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 9.3 Critical 2026-09-08
CVE-2026-77109 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.6 High 2026-09-08
CVE-2026-77110 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 7.6 High 2026-09-08
CVE-2026-77108 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.5 High 2026-09-08
CVE-2026-76202 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.2 High 2026-09-08
CVE-2026-77774 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.6 High 2026-09-08
CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.7 High 2026-09-08
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) CWE-1336 10.0 Critical 2026-09-07
CVE-2026-48414 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 7.7 High 2026-08-11
CVE-2026-48416 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.5 High 2026-08-11
CVE-2026-48415 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.6 High 2026-08-11
CVE-2026-48413 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2026-08-11
CVE-2026-48412 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 2.7 Low 2026-08-11
CVE-2026-48411 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 6.5 Medium 2026-08-11
CVE-2026-71362 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 9.1 Critical 2026-08-11
CVE-2026-47984 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.2 High 2026-07-14
CVE-2026-47997 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.9 Medium 2026-07-14
CVE-2026-47988 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 8.6 High 2026-07-14

All 210 known CVE vulnerabilities affecting Adobe Commerce with full Chinese analysis, references, and POCs where available.