Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5903 articles · 191962 vulns · 37/41 feeds (7d)
← Back to list
7.5
CVE-2026-48416PATCHED
adobe · adobe commerce

Adobe Commerce | Incorrect Authorization (CWE-863)

Description

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.

Affected Products

VendorProductVersions
adobeadobe commerce0, 0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobemagentocert_advisory90%

References

  • https://helpx.adobe.com/security/products/magento/apsb26-92.html(vendor-advisory)

Related News (4 articles)

Tier B
CERT-FR2d ago
Multiples vulnérabilités dans les produits Adobe (13 août 2026)
→ No new info (linked only)
Tier D
BleepingComputer2d ago
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
→ No new info (linked only)
Tier B
BSI Advisories3d ago
[NEU] [hoch] Adobe Magento: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB3d ago
CVE-2026-48416 | Adobe Commerce/Adobe Commerce B2B/Magento Open Source improper authorization
→ No new info (linked only)
CVSS 3.17.5 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
2.4.9-2026-aug2.4.8-2026-aug2.4.7-2026-aug2.4.6-2026-aug2.4.5-2026-aug2.4.4-2026-aug1.5.3-2026-aug1.5.2-2026-aug1.4.2-2026-aug1.3.4-2026-aug1.3.3-2026-aug2.4.9-2026-aug2.4.8-2026-aug2.4.7-2026-aug2.4.6-2026-aug
CWECWE-863
PublishedAug 11, 2026
Trending Score41
Source articles4
Independent4
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-71362
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 60
CRITICALCVE-2026-48362
ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Trending: 50
HIGHCVE-2026-48414
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Trending: 40
CRITICALCVE-2026-71398
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Trending: 39
CRITICALCVE-2026-27302
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
Trending: 39

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Aug 11, 2026
Discovered by ZDM
Aug 11, 2026
Patch Available
Aug 13, 2026