[CVE-2026-47988] Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Securi…

Descripción técnica

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction.

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Productos afectados

Commerce, Commerce b2b, Magento, I\/o events — Adobe

Debilidades (CWE)

CWE-863

Fuente oficial

Publicado en NIST NVD.