Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Adobe Commerce — Vulnerabilities & Security Advisories 210

All 210 CVE vulnerabilities found in Adobe Commerce, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the Adobe Commerce vendor and product under the general category of software weakness types. It collects a comprehensive list of security flaws, ranging from critical remote code execution risks to minor configuration issues, covering the time period from early 2019 through the present day. By examining this curated data, users can effectively track Adobe’s security advisories to stay informed about recent patch releases, understand the characteristics and impact of specific weakness classes prevalent in e-commerce platforms, and look up a detailed history of vulnerabilities affecting this specific product. This resource serves as a central reference for security professionals, developers, and system administrators who need to assess the risk posture of their Adobe Commerce deployments. The information includes details on affected versions, exploit availability, and remediation guidance where applicable. Reviewing these entries helps organizations prioritize their patching strategies and ensures that known security gaps are addressed promptly. The data is organized to facilitate easy searching by vulnerability identifier, severity score, or release date, allowing for efficient integration into vulnerability management workflows. Understanding the historical context of these weaknesses provides valuable insights into the evolution of security practices within the Adobe ecosystem and helps predict potential future risks based on past trends and patterns in code quality and dependency management.

Vendor: Adobe

CVE ID Title CVSS Severity Published
CVE-2026-48358 Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) CWE-116 9.1 Critical 2026-07-14
CVE-2026-47999 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.8 Medium 2026-07-14
CVE-2026-48356 Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) CWE-434 9.3 Critical 2026-07-14
CVE-2026-48000 Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) CWE-601 6.1 Medium 2026-07-14
CVE-2026-47998 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.9 Medium 2026-07-14
CVE-2026-47995 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.1 High 2026-07-14
CVE-2026-48001 Adobe Commerce | Information Exposure (CWE-200) CWE-200 3.7 Low 2026-07-14
CVE-2026-48371 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 5.4 Medium 2026-07-14
CVE-2026-47996 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 6.8 Medium 2026-07-14
CVE-2026-47994 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2026-07-14
CVE-2026-47992 Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) CWE-89 7.2 High 2026-07-14
CVE-2026-34656 Adobe Commerce | Improper Authorization (CWE-285) CWE-285 4.3 Medium 2026-05-12
CVE-2026-34658 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.8 Medium 2026-05-12
CVE-2026-34650 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) CWE-400 7.5 High 2026-05-12
CVE-2026-34686 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 8.7 High 2026-05-12
CVE-2026-34647 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) CWE-918 7.4 High 2026-05-12
CVE-2026-34685 Adobe Commerce | Improper Input Validation (CWE-20) CWE-20 3.4 Low 2026-05-12
CVE-2026-34653 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) CWE-22 8.7 High 2026-05-12
CVE-2026-34652 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) CWE-1395 7.5 High 2026-05-12
CVE-2026-34645 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.5 High 2026-05-12
CVE-2026-34648 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) CWE-400 7.5 High 2026-05-12
CVE-2026-34649 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) CWE-400 7.5 High 2026-05-12
CVE-2026-34655 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.8 Medium 2026-05-12
CVE-2026-34654 Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395) CWE-1395 5.3 Medium 2026-05-12
CVE-2026-34651 Adobe Commerce | Uncontrolled Resource Consumption (CWE-400) CWE-400 7.5 High 2026-05-12
CVE-2026-34646 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 7.5 High 2026-05-12
CVE-2026-21291 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) CWE-79 4.8 Medium 2026-03-11
CVE-2026-21293 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918) CWE-918 5.5 Medium 2026-03-11
CVE-2026-21282 Adobe Commerce | Improper Input Validation (CWE-20) CWE-20 5.3 Medium 2026-03-11
CVE-2026-21286 Adobe Commerce | Incorrect Authorization (CWE-863) CWE-863 5.3 Medium 2026-03-11

All 210 known CVE vulnerabilities affecting Adobe Commerce with full Chinese analysis, references, and POCs where available.