Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-34649 (GCVE-0-2026-34649)
Vulnerability from cvelistv5 – Published: 2026-05-12 19:50 – Updated: 2026-05-13 00:21- CWE-400 - Uncontrolled Resource Consumption (CWE-400)
| URL | Tags |
|---|---|
| https://helpx.adobe.com/security/products/magento… | vendor-advisory |
| Vendor | Product | Version | |
|---|---|---|---|
| Adobe | Adobe Commerce |
Affected:
0 , ≤ 2.4.4-p17
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-34649",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-13T00:21:32.317273Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-13T00:21:43.200Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "Adobe Commerce",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "2.4.4-p17",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"datePublic": "2026-05-12T17:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"confidentialityRequirement": "NOT_DEFINED",
"environmentalScore": 7.5,
"environmentalSeverity": "HIGH",
"exploitCodeMaturity": "NOT_DEFINED",
"integrityImpact": "NONE",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "LOW",
"modifiedAttackVector": "NETWORK",
"modifiedAvailabilityImpact": "HIGH",
"modifiedConfidentialityImpact": "NONE",
"modifiedIntegrityImpact": "NONE",
"modifiedPrivilegesRequired": "NONE",
"modifiedScope": "UNCHANGED",
"modifiedUserInteraction": "NONE",
"privilegesRequired": "NONE",
"remediationLevel": "NOT_DEFINED",
"reportConfidence": "NOT_DEFINED",
"scope": "UNCHANGED",
"temporalScore": 7.5,
"temporalSeverity": "HIGH",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption (CWE-400)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-12T19:50:26.329Z",
"orgId": "078d4453-3bcd-4900-85e6-15281da43538",
"shortName": "adobe"
},
"references": [
{
"tags": [
"vendor-advisory"
],
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)"
}
},
"cveMetadata": {
"assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538",
"assignerShortName": "adobe",
"cveId": "CVE-2026-34649",
"datePublished": "2026-05-12T19:50:26.329Z",
"dateReserved": "2026-03-30T17:30:36.492Z",
"dateUpdated": "2026-05-13T00:21:43.200Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-34649",
"date": "2026-06-19",
"epss": "0.14383",
"percentile": "0.96164"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-34649\",\"sourceIdentifier\":\"psirt@adobe.com\",\"published\":\"2026-05-12T20:16:35.917\",\"lastModified\":\"2026-05-20T17:13:54.970\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@adobe.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt@adobe.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"2.4.4\",\"matchCriteriaId\":\"76AAB57F-7723-44E0-B91A-9F120C849AC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"D258D9EF-94FB-41F0-A7A5-7F66FA7A0055\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E5CF6F0-2388-4D3F-8FE1-43B8AF148564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C3D7164-1C5F-40BC-9EEC-B0E00CD45808\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"68AAE162-5957-42AF-BE20-40F341837FAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9D01159-3309-4F6B-93B0-2D89DDD33DEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"91736E79-D8E7-4AF2-8E01-A7B4EB8AD6F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"8412C043-64E7-4DFF-A303-13A6FE113BFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBDA2BCF-E784-4CF3-B30D-6FF5BEE2055F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"00909C10-6C93-4735-94ED-18DCBD608A28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*\",\"matchCriteriaId\":\"C6F35FE6-853D-4EC6-8A4F-07F4ABD6301A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFEBDDF2-6443-4482-83B2-3CD272CF599F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"6661093F-8D22-450F-BC6C-A8894A52E6A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"2515DA6D-2E74-4A05-BD29-FEEF3322BCB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"69A1F1F7-E53C-40F3-B3D9-DC011FC353BF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A56E96C-6CE5-442C-AA88-F0059B02B5E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"8867F510-201C-4199-8554-53DE156CE669\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"23988132-DD4E-4968-B6B8-954122F76081\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"9B07F7B2-E915-4EFF-8FFC-91143CEF082E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"5764CC97-C866-415D-A3A1-5B5B9E1C06A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"E82D10D8-2894-4E5B-B47B-F00964DD5CDE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"B044F2D9-E888-4852-8A40-DCE688860ED3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"6423C754-36F9-4680-9211-60940ED63E79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"3472064A-8C79-436B-965A-96834AE8D346\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDA8ABEB-F955-4D34-8219-C518B49F5543\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"55D6A6BD-9E63-448A-A286-437EA1580CEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"8605E4E6-0F7D-42C8-B35B-2349A0BEFC69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"B6318F97-E59A-4425-8DC7-045C78A644F8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"324A573E-DBC8-42A0-8CB8-EDD8FBAB7115\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"54151A00-CFB8-4E6A-8E74-497CB67BF7E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6DF0E74D-9293-4209-97D1-A3BA13C3DDE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"8922D646-1A97-47ED-91C6-5A426781C98A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"952787C6-9BF1-49FB-9824-1236678E1902\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"898A8679-3C46-4718-9EDF-583ADDFCF2EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6086841-C175-46A1-8414-71C6163A0E7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"E57889CC-3E90-46AF-9CD6-3328DD501AD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"47A86566-DE38-4032-947D-B6181F0BC120\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7D1D684-CE7E-4D6D-95B5-1F86A8DB6C66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"CABF5BD0-1D06-483D-91D3-A773D99EF217\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"33512239-B316-4FE7-94F0-ABD30900238B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A576B1B5-73A2-431E-998F-7E5458B51D6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E05F4AC-2A28-47E3-96DE-0E31AF73CD43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"3A9A62EE-1649-4815-8EC9-7AEF7949EB2F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"E58690F9-FA9C-42A0-B4CD-91FD1197A53E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B83729E-80AF-47CE-A70C-32BF83024A40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"73D22D42-646D-4955-A6F9-9B7BA63DC0A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5D04853-0C2F-47DD-A939-3A8F6E22CB7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EBB0608-034B-4F07-A59B-9E6A989BA260\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B3BF9B08-84E3-4974-9DEB-F4285995D796\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7771BEDB-05E2-430E-B2A2-E2F7574B7114\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E05341A-C70C-4B3D-AF30-9520D6B97D30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"95026AA9-A28B-4D94-BD77-7628429EBA30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"83FD1220-7D46-42B2-8110-30A934144572\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F1439CE-8A3B-414A-B974-559209FF480C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"13726DEE-FFCB-447B-9FFF-136F132F2C4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A9443CE-AE1F-4D66-9C88-5E2E3FD28EE6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5E29EF8-2569-4258-A66F-E1E5F621E0D4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"141DC3FF-68ED-429D-B10F-3C61B1399513\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EE12F4B-5607-4790-A29B-EE23383BCC1A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D05A958-9749-486A-A149-C21647CDCADF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9E12B43-AD3E-48A2-9042-5586186CA3BE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"C267AF14-7BA8-4D1F-BCD9-BE3ED0DA3D25\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4947C63-CFD9-437B-A09E-A197DCE40095\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FB6D020-2E5C-4789-A063-2C907F3CF3FA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"A607D50D-B385-41F3-B1A9-3B21F52F2386\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce:2.4.9:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4800556-D9A9-41AA-84A8-610BDAE2DE24\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.3.3\",\"matchCriteriaId\":\"28120C2E-10AD-4476-B6C3-BE3A43946068\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E396FB4F-B20A-4BF9-8FBD-014A0F197F08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ADE32D1-2845-4030-BE1F-ECE28189D0F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2E771C9-86C4-455C-98D4-6F4FE7A9A822\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"491AB715-F62A-46DB-A56E-055CF7CB7BEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"6FE364A8-4780-426F-9E8A-284A31FE2623\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9258027-8A6A-4C6A-BC6F-349B6E03D828\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"934C52C7-8751-481E-BAA7-F631C4E31F32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3C5847F-57AA-4ADA-8997-5D4F5FDFF50E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:*\",\"matchCriteriaId\":\"12F8A820-8F52-4214-9EB3-DFEA5C89D738\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5677B7E2-FA07-4536-96A9-2C64BEFD3751\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DCD1522-6E27-474F-9FC6-413409D6AD55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7968FCA-CCFD-4222-8FB8-E6E21107944F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C175A1F-7814-4C51-A7B7-AD5140F0688F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"E66CBFB3-40C3-474A-A3A3-12135F610814\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"F51DFA17-1875-41A9-B141-D89BB6238B3F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A4D10EF-9137-4DF5-A5DD-97907E8B4C02\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CD0DC76-7181-4954-A59E-AB7BB47D0576\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C90C433-6655-4038-9AB3-0304C1AFF360\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"374E7EDD-512A-4633-A136-01A656935334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*\",\"matchCriteriaId\":\"89BAB227-03E6-4776-ADE4-9D9CB666EFD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E5ACABA-D6D6-4F29-A9DD-5A04A44ABE64\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*\",\"matchCriteriaId\":\"FA80AFCE-2663-46C0-AEC0-C16C8E675E6A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB9955CA-7E7B-40D3-A85D-58BB0D9AC897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D0A17AC-D433-47C2-A1AC-88291DCCECCD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E0FD85B-E851-436D-A789-852DD26A3B56\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:*\",\"matchCriteriaId\":\"435DFE49-8BCF-4F74-856C-141037F8666B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E9D364A-C858-4160-8B8B-33ECF94796D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"61559E50-581E-40FF-9FD4-10192ECFCD04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE3BFB41-5633-4167-B1EA-9E958BCE9DC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"F2C525D2-837D-486A-8B38-5634AE2ECE2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F220229-F2DF-4C9D-90A6-8B09F8BE3391\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"63AB9506-3F8E-4C2E-A859-2380431C15A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"51B76658-EA6B-4AC9-9D9C-374C5308D069\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E94B136-7A2C-47F0-BCE4-6BB8E776A305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"15C638A8-EFE0-47DB-B1F9-34093AF0FC17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB863404-A9D7-4692-AB43-08945E669928\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"A21F608C-C356-47B8-8FBB-DB28BABFC4C6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"E14195F1-5016-46BE-A614-6FB4E312FC93\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C360EA8-B18F-4327-90EF-7EED2892BE4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*\",\"matchCriteriaId\":\"500E3A54-D7C7-4887-9EA6-7DF85389A831\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED6FFC1D-E921-4FF7-9928-015630613FE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB8CAC6E-DA06-4C82-B148-38234D4EB910\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEC04530-DA8F-4411-8C55-9291F5CBBC8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"D855D141-7876-4F5A-91BE-6350DD379879\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"79CBDF59-EB84-44D3-81CF-5CBF943B411E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"2117B163-D88E-4EB4-AEA7-F27FB732BD48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*\",\"matchCriteriaId\":\"33E56E15-320F-4517-85C1-832A5942944C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:*\",\"matchCriteriaId\":\"F50271FB-D419-4F63-A4CE-ED94C202AE8E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:commerce_b2b:1.5.3:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A4BB895-9ECD-4026-9AC0-345F9AB817E1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*\",\"versionEndExcluding\":\"2.4.6\",\"matchCriteriaId\":\"371EC52C-661F-45E9-B010-7E92E829684B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"789BD987-9DAD-4EAE-93DE-0E267D54F124\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A3F113C0-00C5-4BC2-B42B-8AE3756252F2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"AE842CC8-7795-4238-B727-0BA2FFFBF62C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"AE724531-422D-4ABB-98F5-2C0B1BBEF031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"BB499397-0E40-45B0-A7E9-BEFCC909DD07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"0F972E57-B08E-46DF-88F1-A3002F001E83\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"F2DB3C10-65DF-4642-B581-8BE75FA2FAFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"02592D65-2D2C-460A-A970-8A18F9B156ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"457B89CF-C75E-4ED6-8603-9C52BA462A9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"2A2DD9C6-BAF5-4DF5-9C14-3478923B2019\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"2AA0B806-ABB8-4C18-9F9C-8291BE208F52\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"AA9D4DAB-7567-48D7-BE60-2A10B35CFF27\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A91E797D-63F6-4DE8-869C-AF0133DC6C03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"0E06FE04-8844-4409-92D9-4972B47C921B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"99C620F3-40ED-4D7F-B6A1-205E948FD6F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"FBCFE5FB-FAB7-4BF0-90AE-79F9590FD872\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"7EB4B9C5-513C-4039-8087-5E8880894318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9C77154A-DBFE-48C3-A274-03075A0DB040\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"F5AAC414-623C-444F-9BD5-EE0ACE2B2246\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"8292888D-B0B0-4DF3-8719-EA4CDCAB39D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9830E074-FDCF-41E9-98C7-10C20424EF4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9D0C8648-B39E-47C7-AA5C-3AFED22F8D40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"082F8B60-ECC5-4C55-BBFE-A0C8A3E95590\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"A7B83AD4-3134-414A-80E3-106C3C0F975A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"FAA14D5B-ACF2-497B-ACE7-33C42682D2DF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"FCD04DB8-77E6-47FA-957C-F41530DC45E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"00E8284F-10CD-449C-AEF1-688B8287292F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"2957B390-52C5-48D7-A6D7-709BC76B9C69\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"524F64B6-F7F7-4926-884F-E9448636007C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"9F56F919-69B6-4A77-B8CE-F13409542F14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"F81D46F6-AEA3-4A83-A6F5-2231FD4CEC46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"10A2F717-827A-424E-8DBA-CABED7C70A08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:adobe:magento:2.4.9:beta1:*:*:open_source:*:*:*\",\"matchCriteriaId\":\"ED72E42E-7F55-4FEE-B936-B5EE688BF4E0\"}]}]}],\"references\":[{\"url\":\"https://helpx.adobe.com/security/products/magento/apsb26-49.html\",\"source\":\"psirt@adobe.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
CERTFR-2026-AVI-0580
Vulnerability from certfr_avis - Published: 2026-05-13 - Updated: 2026-05-13
De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à l'intégrité des données.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | Commerce | Adobe Commerce B2B versions 1.5.3 antérieures à 1.5.3 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.7 antérieures à 2.4.7-p10 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.5.2 antérieures à 1.5.2-p5 | ||
| Adobe | Magento | Magento Open Source versions 2.4.7 antérieures à 2.4.7-p10 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.8 antérieures à 2.4.8-p5 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.6 antérieures à 2.4.6-p15 | ||
| Adobe | Magento | Magento Open Source versions 2.4.9 antérieures à 2.4.9 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.4 antérieures à 1.3.4-p17 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.9 antérieures à 2.4.9 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.4 antérieures à 2.4.4-p18 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.3.3 antérieures à 1.3.3-p18 | ||
| Adobe | Magento | Magento Open Source versions 2.4.8 antérieures à 2.4.8-p5 | ||
| Adobe | Commerce | Adobe Commerce B2B versions 1.4.2 antérieures à 1.4.2-p10 | ||
| Adobe | Magento | Magento Open Source versions 2.4.6 antérieures à 2.4.6-p15 | ||
| Adobe | Commerce | Adobe Commerce versions 2.4.5 antérieures à 2.4.5-p17 |
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Commerce B2B versions 1.5.3 ant\u00e9rieures \u00e0 1.5.3",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.7 ant\u00e9rieures \u00e0 2.4.7-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.5.2 ant\u00e9rieures \u00e0 1.5.2-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.7 ant\u00e9rieures \u00e0 2.4.7-p10",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.8 ant\u00e9rieures \u00e0 2.4.8-p5",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.6 ant\u00e9rieures \u00e0 2.4.6-p15",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.9 ant\u00e9rieures \u00e0 2.4.9",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.4 ant\u00e9rieures \u00e0 1.3.4-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.9 ant\u00e9rieures \u00e0 2.4.9",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.4 ant\u00e9rieures \u00e0 2.4.4-p18",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.3.3 ant\u00e9rieures \u00e0 1.3.3-p18",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.8 ant\u00e9rieures \u00e0 2.4.8-p5",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce B2B versions 1.4.2 ant\u00e9rieures \u00e0 1.4.2-p10",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Magento Open Source versions 2.4.6 ant\u00e9rieures \u00e0 2.4.6-p15",
"product": {
"name": "Magento",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Commerce versions 2.4.5 ant\u00e9rieures \u00e0 2.4.5-p17",
"product": {
"name": "Commerce",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-34658",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34658"
},
{
"name": "CVE-2026-34685",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34685"
},
{
"name": "CVE-2026-34654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34654"
},
{
"name": "CVE-2026-34655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34655"
},
{
"name": "CVE-2026-34656",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34656"
},
{
"name": "CVE-2026-34650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34650"
},
{
"name": "CVE-2026-34647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34647"
},
{
"name": "CVE-2026-34649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34649"
},
{
"name": "CVE-2026-34646",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34646"
},
{
"name": "CVE-2026-34648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34648"
},
{
"name": "CVE-2026-34653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34653"
},
{
"name": "CVE-2026-34645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34645"
},
{
"name": "CVE-2026-34651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34651"
},
{
"name": "CVE-2026-34686",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34686"
},
{
"name": "CVE-2026-34652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34652"
}
],
"initial_release_date": "2026-05-13T00:00:00",
"last_revision_date": "2026-05-13T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0580",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-05-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
},
{
"description": "Falsification de requ\u00eates c\u00f4t\u00e9 serveur (SSRF)"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Adobe. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Adobe",
"vendor_advisories": [
{
"published_at": "2026-05-12",
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB26-49",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
]
}
厂商已发布了漏洞修复程序,请及时关注更新: https://helpx.adobe.com/security/products/magento/apsb26-49.html
| Name | ['Adobe Commerces 2.4.9-beta1', 'Adobe Commerces 2.4.8-p4', 'Adobe Commerces 2.4.7-p9', 'Adobe Commerces 2.4.6-p14', 'Adobe Commerces <=2.4.4-p17'] |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2026-34649",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2026-34649"
}
},
"description": "Adobe Commerce\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u79cd\u9762\u5411\u5546\u5bb6\u548c\u54c1\u724c\u7684\u5168\u7403\u9886\u5148\u7684\u6570\u5b57\u5546\u52a1\u89e3\u51b3\u65b9\u6848\u3002\n\nAdobe Commerce\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8017\u5c3d\u7cfb\u7edf\u8d44\u6e90\uff0c\u5bfc\u81f4\u5e94\u7528\u7a0b\u5e8f\u62d2\u7edd\u670d\u52a1\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://helpx.adobe.com/security/products/magento/apsb26-49.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2026-22582",
"openTime": "2026-06-02",
"patchDescription": "Adobe Commerce\u662f\u7f8e\u56fd\u5965\u591a\u6bd4\uff08Adobe\uff09\u516c\u53f8\u7684\u4e00\u79cd\u9762\u5411\u5546\u5bb6\u548c\u54c1\u724c\u7684\u5168\u7403\u9886\u5148\u7684\u6570\u5b57\u5546\u52a1\u89e3\u51b3\u65b9\u6848\u3002\r\n\r\nAdobe Commerce\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u8017\u5c3d\u7cfb\u7edf\u8d44\u6e90\uff0c\u5bfc\u81f4\u5e94\u7528\u7a0b\u5e8f\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Adobe Commerce\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2026-22582\uff09\u7684\u8865\u4e01",
"products": {
"product": [
"Adobe Commerces 2.4.9-beta1",
"Adobe Commerces 2.4.8-p4",
"Adobe Commerces 2.4.7-p9",
"Adobe Commerces 2.4.6-p14",
"Adobe Commerces \u003c=2.4.4-p17"
]
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2026-34649",
"serverity": "\u9ad8",
"submitTime": "2026-05-18",
"title": "Adobe Commerce\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff08CNVD-2026-22582\uff09"
}
FKIE_CVE-2026-34649
Vulnerability from fkie_nvd - Published: 2026-05-12 20:16 - Updated: 2026-06-17 10:39| URL | Tags | ||
|---|---|---|---|
| psirt@adobe.com | https://helpx.adobe.com/security/products/magento/apsb26-49.html | Vendor Advisory |
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "affected",
"product": "Adobe Commerce",
"vendor": "Adobe",
"versions": [
{
"lessThanOrEqual": "2.4.4-p17",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"source": "psirt@adobe.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*",
"matchCriteriaId": "76AAB57F-7723-44E0-B91A-9F120C849AC4",
"versionEndExcluding": "2.4.4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*",
"matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*",
"matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*",
"matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*",
"matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*",
"matchCriteriaId": "D9D01159-3309-4F6B-93B0-2D89DDD33DEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*",
"matchCriteriaId": "91736E79-D8E7-4AF2-8E01-A7B4EB8AD6F4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*",
"matchCriteriaId": "8412C043-64E7-4DFF-A303-13A6FE113BFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*",
"matchCriteriaId": "BBDA2BCF-E784-4CF3-B30D-6FF5BEE2055F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*",
"matchCriteriaId": "00909C10-6C93-4735-94ED-18DCBD608A28",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*",
"matchCriteriaId": "C6F35FE6-853D-4EC6-8A4F-07F4ABD6301A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*",
"matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*",
"matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*",
"matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*",
"matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*",
"matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*",
"matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*",
"matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*",
"matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*",
"matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*",
"matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*",
"matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*",
"matchCriteriaId": "E82D10D8-2894-4E5B-B47B-F00964DD5CDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*",
"matchCriteriaId": "B044F2D9-E888-4852-8A40-DCE688860ED3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*",
"matchCriteriaId": "6423C754-36F9-4680-9211-60940ED63E79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*",
"matchCriteriaId": "3472064A-8C79-436B-965A-96834AE8D346",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*",
"matchCriteriaId": "CDA8ABEB-F955-4D34-8219-C518B49F5543",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:*",
"matchCriteriaId": "55D6A6BD-9E63-448A-A286-437EA1580CEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*",
"matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*",
"matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*",
"matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*",
"matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*",
"matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*",
"matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*",
"matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*",
"matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*",
"matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*",
"matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*",
"matchCriteriaId": "E57889CC-3E90-46AF-9CD6-3328DD501AD1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*",
"matchCriteriaId": "47A86566-DE38-4032-947D-B6181F0BC120",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*",
"matchCriteriaId": "B7D1D684-CE7E-4D6D-95B5-1F86A8DB6C66",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*",
"matchCriteriaId": "CABF5BD0-1D06-483D-91D3-A773D99EF217",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:*",
"matchCriteriaId": "33512239-B316-4FE7-94F0-ABD30900238B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*",
"matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*",
"matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*",
"matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*",
"matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*",
"matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*",
"matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*",
"matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*",
"matchCriteriaId": "73D22D42-646D-4955-A6F9-9B7BA63DC0A9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*",
"matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*",
"matchCriteriaId": "6EBB0608-034B-4F07-A59B-9E6A989BA260",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*",
"matchCriteriaId": "B3BF9B08-84E3-4974-9DEB-F4285995D796",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*",
"matchCriteriaId": "7771BEDB-05E2-430E-B2A2-E2F7574B7114",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*",
"matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*",
"matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*",
"matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*",
"matchCriteriaId": "83FD1220-7D46-42B2-8110-30A934144572",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*",
"matchCriteriaId": "3F1439CE-8A3B-414A-B974-559209FF480C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*",
"matchCriteriaId": "13726DEE-FFCB-447B-9FFF-136F132F2C4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*",
"matchCriteriaId": "1A9443CE-AE1F-4D66-9C88-5E2E3FD28EE6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*",
"matchCriteriaId": "B5E29EF8-2569-4258-A66F-E1E5F621E0D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:*",
"matchCriteriaId": "141DC3FF-68ED-429D-B10F-3C61B1399513",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*",
"matchCriteriaId": "1EE12F4B-5607-4790-A29B-EE23383BCC1A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*",
"matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*",
"matchCriteriaId": "C9E12B43-AD3E-48A2-9042-5586186CA3BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*",
"matchCriteriaId": "C267AF14-7BA8-4D1F-BCD9-BE3ED0DA3D25",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*",
"matchCriteriaId": "B4947C63-CFD9-437B-A09E-A197DCE40095",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*",
"matchCriteriaId": "7FB6D020-2E5C-4789-A063-2C907F3CF3FA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:*",
"matchCriteriaId": "A607D50D-B385-41F3-B1A9-3B21F52F2386",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce:2.4.9:beta1:*:*:*:*:*:*",
"matchCriteriaId": "E4800556-D9A9-41AA-84A8-610BDAE2DE24",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*",
"matchCriteriaId": "28120C2E-10AD-4476-B6C3-BE3A43946068",
"versionEndExcluding": "1.3.3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",
"matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*",
"matchCriteriaId": "E396FB4F-B20A-4BF9-8FBD-014A0F197F08",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*",
"matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*",
"matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*",
"matchCriteriaId": "491AB715-F62A-46DB-A56E-055CF7CB7BEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*",
"matchCriteriaId": "6FE364A8-4780-426F-9E8A-284A31FE2623",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*",
"matchCriteriaId": "F9258027-8A6A-4C6A-BC6F-349B6E03D828",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*",
"matchCriteriaId": "934C52C7-8751-481E-BAA7-F631C4E31F32",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*",
"matchCriteriaId": "D3C5847F-57AA-4ADA-8997-5D4F5FDFF50E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:*",
"matchCriteriaId": "12F8A820-8F52-4214-9EB3-DFEA5C89D738",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*",
"matchCriteriaId": "5677B7E2-FA07-4536-96A9-2C64BEFD3751",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*",
"matchCriteriaId": "2DCD1522-6E27-474F-9FC6-413409D6AD55",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*",
"matchCriteriaId": "B7968FCA-CCFD-4222-8FB8-E6E21107944F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*",
"matchCriteriaId": "8C175A1F-7814-4C51-A7B7-AD5140F0688F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*",
"matchCriteriaId": "E66CBFB3-40C3-474A-A3A3-12135F610814",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*",
"matchCriteriaId": "F51DFA17-1875-41A9-B141-D89BB6238B3F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*",
"matchCriteriaId": "5A4D10EF-9137-4DF5-A5DD-97907E8B4C02",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*",
"matchCriteriaId": "5CD0DC76-7181-4954-A59E-AB7BB47D0576",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",
"matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*",
"matchCriteriaId": "374E7EDD-512A-4633-A136-01A656935334",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*",
"matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*",
"matchCriteriaId": "0E5ACABA-D6D6-4F29-A9DD-5A04A44ABE64",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*",
"matchCriteriaId": "FA80AFCE-2663-46C0-AEC0-C16C8E675E6A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*",
"matchCriteriaId": "EB9955CA-7E7B-40D3-A85D-58BB0D9AC897",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*",
"matchCriteriaId": "5D0A17AC-D433-47C2-A1AC-88291DCCECCD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*",
"matchCriteriaId": "7E0FD85B-E851-436D-A789-852DD26A3B56",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:*",
"matchCriteriaId": "435DFE49-8BCF-4F74-856C-141037F8666B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*",
"matchCriteriaId": "0E9D364A-C858-4160-8B8B-33ECF94796D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*",
"matchCriteriaId": "61559E50-581E-40FF-9FD4-10192ECFCD04",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*",
"matchCriteriaId": "DE3BFB41-5633-4167-B1EA-9E958BCE9DC2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*",
"matchCriteriaId": "F2C525D2-837D-486A-8B38-5634AE2ECE2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*",
"matchCriteriaId": "6F220229-F2DF-4C9D-90A6-8B09F8BE3391",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*",
"matchCriteriaId": "63AB9506-3F8E-4C2E-A859-2380431C15A6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*",
"matchCriteriaId": "51B76658-EA6B-4AC9-9D9C-374C5308D069",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*",
"matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",
"matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*",
"matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*",
"matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*",
"matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*",
"matchCriteriaId": "E14195F1-5016-46BE-A614-6FB4E312FC93",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*",
"matchCriteriaId": "9C360EA8-B18F-4327-90EF-7EED2892BE4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*",
"matchCriteriaId": "500E3A54-D7C7-4887-9EA6-7DF85389A831",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*",
"matchCriteriaId": "ED6FFC1D-E921-4FF7-9928-015630613FE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*",
"matchCriteriaId": "FB8CAC6E-DA06-4C82-B148-38234D4EB910",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:*",
"matchCriteriaId": "CEC04530-DA8F-4411-8C55-9291F5CBBC8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*",
"matchCriteriaId": "D855D141-7876-4F5A-91BE-6350DD379879",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*",
"matchCriteriaId": "79CBDF59-EB84-44D3-81CF-5CBF943B411E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*",
"matchCriteriaId": "2117B163-D88E-4EB4-AEA7-F27FB732BD48",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*",
"matchCriteriaId": "33E56E15-320F-4517-85C1-832A5942944C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:*",
"matchCriteriaId": "F50271FB-D419-4F63-A4CE-ED94C202AE8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.3:beta1:*:*:*:*:*:*",
"matchCriteriaId": "6A4BB895-9ECD-4026-9AC0-345F9AB817E1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*",
"matchCriteriaId": "371EC52C-661F-45E9-B010-7E92E829684B",
"versionEndExcluding": "2.4.6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*",
"matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*",
"matchCriteriaId": "AE842CC8-7795-4238-B727-0BA2FFFBF62C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*",
"matchCriteriaId": "AE724531-422D-4ABB-98F5-2C0B1BBEF031",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*",
"matchCriteriaId": "BB499397-0E40-45B0-A7E9-BEFCC909DD07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*",
"matchCriteriaId": "0F972E57-B08E-46DF-88F1-A3002F001E83",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:*",
"matchCriteriaId": "F2DB3C10-65DF-4642-B581-8BE75FA2FAFA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*",
"matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*",
"matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*",
"matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*",
"matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*",
"matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*",
"matchCriteriaId": "A91E797D-63F6-4DE8-869C-AF0133DC6C03",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*",
"matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*",
"matchCriteriaId": "99C620F3-40ED-4D7F-B6A1-205E948FD6F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*",
"matchCriteriaId": "FBCFE5FB-FAB7-4BF0-90AE-79F9590FD872",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*",
"matchCriteriaId": "7EB4B9C5-513C-4039-8087-5E8880894318",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*",
"matchCriteriaId": "9830E074-FDCF-41E9-98C7-10C20424EF4C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*",
"matchCriteriaId": "9D0C8648-B39E-47C7-AA5C-3AFED22F8D40",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*",
"matchCriteriaId": "082F8B60-ECC5-4C55-BBFE-A0C8A3E95590",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*",
"matchCriteriaId": "A7B83AD4-3134-414A-80E3-106C3C0F975A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*",
"matchCriteriaId": "FAA14D5B-ACF2-497B-ACE7-33C42682D2DF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:*",
"matchCriteriaId": "FCD04DB8-77E6-47FA-957C-F41530DC45E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*",
"matchCriteriaId": "00E8284F-10CD-449C-AEF1-688B8287292F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*",
"matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*",
"matchCriteriaId": "2957B390-52C5-48D7-A6D7-709BC76B9C69",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*",
"matchCriteriaId": "524F64B6-F7F7-4926-884F-E9448636007C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*",
"matchCriteriaId": "9F56F919-69B6-4A77-B8CE-F13409542F14",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*",
"matchCriteriaId": "F81D46F6-AEA3-4A83-A6F5-2231FD4CEC46",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:*",
"matchCriteriaId": "10A2F717-827A-424E-8DBA-CABED7C70A08",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:adobe:magento:2.4.9:beta1:*:*:open_source:*:*:*",
"matchCriteriaId": "ED72E42E-7F55-4FEE-B936-B5EE688BF4E0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction."
}
],
"id": "CVE-2026-34649",
"lastModified": "2026-06-17T10:39:22.717",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6,
"source": "psirt@adobe.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-34649",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-13T00:21:32.317273Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-05-12T20:16:35.917",
"references": [
{
"source": "psirt@adobe.com",
"tags": [
"Vendor Advisory"
],
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
],
"sourceIdentifier": "psirt@adobe.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
],
"source": "psirt@adobe.com",
"type": "Secondary"
}
]
}
GHSA-637X-GCP7-9GFX
Vulnerability from github – Published: 2026-05-12 21:31 – Updated: 2026-05-12 21:31Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.
{
"affected": [],
"aliases": [
"CVE-2026-34649"
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2026-05-12T20:16:35Z",
"severity": "HIGH"
},
"details": "Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.",
"id": "GHSA-637x-gcp7-9gfx",
"modified": "2026-05-12T21:31:33Z",
"published": "2026-05-12T21:31:33Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34649"
},
{
"type": "WEB",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2026-0152
Vulnerability from csaf_ncscnl - Published: 2026-05-13 09:27 - Updated: 2026-05-13 09:27Adobe Commerce versions 2.4.9-beta1 and earlier contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls and gain unauthorized write access without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Commerce B2B
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Magento Open Source
|
vers:unknown/* |
Adobe Commerce versions 2.4.9-beta1 and earlier contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls and gain unauthorized write access without user interaction.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Commerce B2B
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Magento Open Source
|
vers:unknown/* |
Adobe Commerce versions up to 2.4.9-beta1 contain a Server-Side Request Forgery (SSRF) vulnerability that can bypass security controls and enable unauthorized read access via user interaction with malicious URLs or compromised webpages.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Commerce B2B
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Magento Open Source
|
vers:unknown/* |
Adobe Commerce versions 2.4.4-p17 through 2.4.9-beta1 and earlier contain an Uncontrolled Resource Consumption vulnerability exploitable without user interaction, leading to application denial-of-service by exhausting system resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Commerce B2B
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Magento Open Source
|
vers:unknown/* |
Adobe Commerce versions 2.4.4-p17 through 2.4.9-beta1 and earlier contain an Uncontrolled Resource Consumption vulnerability exploitable without user interaction, leading to application denial-of-service by exhausting system resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Commerce B2B
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Magento Open Source
|
vers:unknown/* |
Adobe Commerce versions 2.4.4-p17 through 2.4.9-beta1 and earlier contain an Uncontrolled Resource Consumption vulnerability exploitable without user interaction, leading to application denial-of-service by exhausting system resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:unknown/*
Adobe / Commerce
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Commerce B2B
|
vers:unknown/* | ||
|
vers:unknown/*
Adobe / Magento Open Source
|
vers:unknown/* |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Adobe heeft meerdere kwetsbaarheden verholpen in Adobe Commerce.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden bevinden zich in verschillende versies van Adobe Commerce, waaronder 2.4.9-beta1 en eerdere versies. Een Incorrect Authorization kwetsbaarheid maakt het mogelijk voor aanvallers om autorisatiecontroles te omzeilen en ongeautoriseerde schrijfrechten te verkrijgen zonder gebruikersinteractie. Daarnaast is er een Server-Side Request Forgery (SSRF) kwetsbaarheid die aanvallers in staat stelt beveiligingsmaatregelen te omzeilen en ongeautoriseerde leesrechten te verkrijgen door het serververzoek te manipuleren, waarvoor wel gebruikersinteractie via een kwaadaardige URL of webpagina nodig is. Verder is er een Uncontrolled Resource Consumption kwetsbaarheid die zonder gebruikersinteractie kan worden misbruikt om systeembronnen uit te putten, wat resulteert in een denial-of-service situatie die de beschikbaarheid van het Adobe Commerce platform be\u00efnvloedt. ",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Adobe heeft updates uitgebracht om de kwetsbaarheden in Adobe Commerce te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "general",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
],
"title": "Kwetsbaarheden verholpen in Adobe Commerce",
"tracking": {
"current_release_date": "2026-05-13T09:27:40.994780Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.3"
}
},
"id": "NCSC-2026-0152",
"initial_release_date": "2026-05-13T09:27:40.994780Z",
"revision_history": [
{
"date": "2026-05-13T09:27:40.994780Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-1"
}
}
],
"category": "product_name",
"name": "Commerce"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-2"
}
}
],
"category": "product_name",
"name": "Commerce B2B"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:unknown/*",
"product": {
"name": "vers:unknown/*",
"product_id": "CSAFPID-3"
}
}
],
"category": "product_name",
"name": "Magento Open Source"
}
],
"category": "vendor",
"name": "Adobe"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34645",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Adobe Commerce versions 2.4.9-beta1 and earlier contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls and gain unauthorized write access without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34645 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34645.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
}
],
"title": "CVE-2026-34645"
},
{
"cve": "CVE-2026-34646",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "other",
"text": "Incorrect Authorization",
"title": "CWE-863"
},
{
"category": "description",
"text": "Adobe Commerce versions 2.4.9-beta1 and earlier contain an Incorrect Authorization vulnerability that enables attackers to bypass security controls and gain unauthorized write access without user interaction.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34646 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34646.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
}
],
"title": "CVE-2026-34646"
},
{
"cve": "CVE-2026-34647",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"notes": [
{
"category": "other",
"text": "Server-Side Request Forgery (SSRF)",
"title": "CWE-918"
},
{
"category": "description",
"text": "Adobe Commerce versions up to 2.4.9-beta1 contain a Server-Side Request Forgery (SSRF) vulnerability that can bypass security controls and enable unauthorized read access via user interaction with malicious URLs or compromised webpages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34647 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34647.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
}
],
"title": "CVE-2026-34647"
},
{
"cve": "CVE-2026-34648",
"notes": [
{
"category": "description",
"text": "Adobe Commerce versions 2.4.4-p17 through 2.4.9-beta1 and earlier contain an Uncontrolled Resource Consumption vulnerability exploitable without user interaction, leading to application denial-of-service by exhausting system resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34648 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34648.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
}
],
"title": "CVE-2026-34648"
},
{
"cve": "CVE-2026-34649",
"notes": [
{
"category": "description",
"text": "Adobe Commerce versions 2.4.4-p17 through 2.4.9-beta1 and earlier contain an Uncontrolled Resource Consumption vulnerability exploitable without user interaction, leading to application denial-of-service by exhausting system resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34649 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34649.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
}
],
"title": "CVE-2026-34649"
},
{
"cve": "CVE-2026-34650",
"notes": [
{
"category": "description",
"text": "Adobe Commerce versions 2.4.4-p17 through 2.4.9-beta1 and earlier contain an Uncontrolled Resource Consumption vulnerability exploitable without user interaction, leading to application denial-of-service by exhausting system resources.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2026-34650 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2026/cve-2026-34650.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-1",
"CSAFPID-2",
"CSAFPID-3"
]
}
],
"title": "CVE-2026-34650"
}
]
}
WID-SEC-W-2026-1497
Vulnerability from csaf_certbund - Published: 2026-05-12 22:00 - Updated: 2026-05-12 22:00| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Adobe Magento <2.4.6-p15
Adobe / Magento
|
<2.4.6-p15 | ||
|
Adobe Magento <2.4.8-p5
Adobe / Magento
|
<2.4.8-p5 | ||
|
Adobe Magento <2.4.7-p10
Adobe / Magento
|
<2.4.7-p10 | ||
|
Adobe Magento <2.4.9
Adobe / Magento
|
<2.4.9 |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Magento ist ein Online-Shop System von Adobe.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um beliebigen Code auszuf\u00fchren, Sicherheitsma\u00dfnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuf\u00fchren, Daten zu manipulieren oder einen Denial-of-Service-Zustand zu verursachen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1497 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1497.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1497 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1497"
},
{
"category": "external",
"summary": "Adobe Security Bulletin apsb26-49 vom 2026-05-12",
"url": "https://helpx.adobe.com/security/products/magento/apsb26-49.html"
}
],
"source_lang": "en-US",
"title": "Adobe Magento: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-05-12T22:00:00.000+00:00",
"generator": {
"date": "2026-05-13T09:03:29.615+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2026-1497",
"initial_release_date": "2026-05-12T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-05-12T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c2.4.9",
"product": {
"name": "Adobe Magento \u003c2.4.9",
"product_id": "T053920"
}
},
{
"category": "product_version",
"name": "2.4.9",
"product": {
"name": "Adobe Magento 2.4.9",
"product_id": "T053920-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.9"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.8-p5",
"product": {
"name": "Adobe Magento \u003c2.4.8-p5",
"product_id": "T053921"
}
},
{
"category": "product_version",
"name": "2.4.8-p5",
"product": {
"name": "Adobe Magento 2.4.8-p5",
"product_id": "T053921-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.8-p5"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.7-p10",
"product": {
"name": "Adobe Magento \u003c2.4.7-p10",
"product_id": "T053922"
}
},
{
"category": "product_version",
"name": "2.4.7-p10",
"product": {
"name": "Adobe Magento 2.4.7-p10",
"product_id": "T053922-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.7-p10"
}
}
},
{
"category": "product_version_range",
"name": "\u003c2.4.6-p15",
"product": {
"name": "Adobe Magento \u003c2.4.6-p15",
"product_id": "T053923"
}
},
{
"category": "product_version",
"name": "2.4.6-p15",
"product": {
"name": "Adobe Magento 2.4.6-p15",
"product_id": "T053923-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:adobe:magento:2.4.6-p15"
}
}
}
],
"category": "product_name",
"name": "Magento"
}
],
"category": "vendor",
"name": "Adobe"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-34645",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34645"
},
{
"cve": "CVE-2026-34646",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34646"
},
{
"cve": "CVE-2026-34647",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34647"
},
{
"cve": "CVE-2026-34648",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34648"
},
{
"cve": "CVE-2026-34649",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34649"
},
{
"cve": "CVE-2026-34650",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34650"
},
{
"cve": "CVE-2026-34651",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34651"
},
{
"cve": "CVE-2026-34652",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34652"
},
{
"cve": "CVE-2026-34653",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34653"
},
{
"cve": "CVE-2026-34654",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34654"
},
{
"cve": "CVE-2026-34655",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34655"
},
{
"cve": "CVE-2026-34656",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34656"
},
{
"cve": "CVE-2026-34658",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34658"
},
{
"cve": "CVE-2026-34685",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34685"
},
{
"cve": "CVE-2026-34686",
"product_status": {
"known_affected": [
"T053923",
"T053921",
"T053922",
"T053920"
]
},
"release_date": "2026-05-12T22:00:00.000+00:00",
"title": "CVE-2026-34686"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.