Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5995 articles · 220168 vulns · 37/41 feeds (7d)
← Back to list
8.2
CVE-2026-76202PATCHED
adobe · commerce

Adobe Commerce | Incorrect Authorization (CWE-863)

Description

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction.

Affected Products

VendorProductVersions
adobecommerce0, 0, 0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
adobemagentocert_advisory90%
adobecommerce_b2bcve_cpe95%

References

  • https://helpx.adobe.com/security/products/magento/apsb26-138.html(vendor-advisory)

Related News (3 articles)

Tier B
BSI Advisories12d ago
[NEU] [hoch] Adobe Magento: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR12d ago
Multiples vulnérabilités dans les produits Adobe (09 septembre 2026)
→ No new info (linked only)
Tier C
VulDB12d ago
CVE-2026-76202 | Adobe Commerce/Commerce B2B/Magento Open Source privileges management
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.2 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA KEV❌ No
Actively exploited❌ No
Patch available
2.4.9-2026-sep2.4.8-2026-sep2.4.7-2026-sep2.4.6-2026-sep2.4.5-2026-sep2.4.4-2026-sep1.5.3-2026-sep1.5.2-2026-sep1.4.2-2026-sep1.3.4-2026-sep1.3.3-2026-sep2.4.9-2026-sep2.4.8-2026-sep2.4.7-2026-sep
CWECWE-863
PublishedSep 8, 2026
Trending Score14
Source articles3
Independent3
Info Completeness0/14
Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-75650EXPKEV
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Trending: 52
CRITICALCVE-2026-48273
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
Trending: 18
HIGHCVE-2026-77109
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 14
HIGHCVE-2026-77108
Adobe Commerce | Incorrect Authorization (CWE-863)
Trending: 13
HIGHCVE-2026-76190
ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
Trending: 13

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 8, 2026
Discovered by ZDM
Sep 8, 2026
Patch Available
Sep 10, 2026