CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Adobe Commerce (Magento) Unrestricted File Upload Vulnerability (CVE-2026-48356) - Critical RCE Advisory
[Affected Scope] All versions of Adobe Commerce and Magento Open Source prior to APSB26-73.
[Impact] Remote Code Execution (RCE) via malicious file upload, leading to full server compromise and potential data exfiltration.
[Mitigation] Apply official Adobe security patches (APSB26-73) immediately and restrict execution permissions in upload directories.
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability (CVE-2025-54236) Security Advisory
[Affected Scope] Adobe Commerce and Magento Open Source versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier
[Impact] Unauthenticated remote attackers can exploit this vulnerability to achieve session takeover and potential remote code execution (RCE) without user interaction
[Mitigation] Immediately apply the official Adobe security patches (APSB25-88) and restrict access to session management endpoints
Adobe Commerce and Magento XML External Entity Reference (XXE) Vulnerability (CVE-2024-34102, CosmicSting) Analysis and Mitigation Guide
[Affected Scope] Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier
[Impact] Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files and potentially achieve Remote Code Execution (RCE)
[Mitigation] Apply the official Adobe security patches (APSB24-40) or upgrade to the latest secure releases immediately
Adobe Commerce and Magento Open Source Remote Code Execution (RCE) Vulnerability Advisory (CVE-2022-24086)
[Affected Scope] Adobe Commerce and Magento Open Source versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier)
[Impact] Unauthenticated attackers can exploit improper input validation during the checkout process to execute arbitrary code (RCE) without user interaction, potentially leading to full system compromise
[Mitigation] Immediately apply the official Adobe security patches (APSB22-12) and update Web Application Firewall (WAF) rules