CVE-2026-48416
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
CVSS score7.5 / 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeakness type (CWE)CWE-863
Vendorsadobe
Affected products
| Vendors | Product | Versions |
|---|---|---|
| adobe | commerce b2b | 1.3.3 |
| adobe | commerce | 2.4.4 |
| adobe | magento | 2.4.6 |
Related articles
This product uses the NVD API but is not endorsed or certified by the NVD.