CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-09-09
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability (CVE-2025-54236) Security Advisory
[Affected Scope] Adobe Commerce and Magento Open Source versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier
[Impact] Unauthenticated remote attackers can exploit this vulnerability to achieve session takeover and potential remote code execution (RCE) without user interaction
[Mitigation] Immediately apply the official Adobe security patches (APSB25-88) and restrict access to session management endpoints