Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…CVE-2026-21286 · adobe · commerce b2b · CVE.org · NIST NVD · Adobe, MagentoMar 11, 2026
Medium4.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that cou…CVE-2026-21285 · adobe · commerce b2b · CVE.org · NIST NVD · Adobe, MagentoMar 11, 2026
High8.1Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…CVE-2026-21284 · adobe · commerce b2b · CVE.org · NIST NVD · Adobe, MagentoMar 11, 2026
Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…CVE-2026-21282 · adobe · commerce · CVE.org · NIST NVD · Adobe, MagentoMar 11, 2026
Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityCVE-2025-54236 · Adobe · Commerce and Magento · CISA KEV · CVE.org · FIRST EPSS · Adobe, MagentoKEVEPSS 94.5%Sep 9, 2025
Critical9.8Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityCVE-2024-34102 · adobe · commerce · CISA KEV · CVE.org · FIRST EPSS · Adobe, MagentoKEVEPSS 100.0%Jun 13, 2024
Critical9.8Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityCVE-2022-24086 · adobe · commerce · CISA KEV · CVE.org · FIRST EPSS · Adobe, MagentoKEVEPSS 99.2%Feb 15, 2022