Login Request a demo
CB
Product
Commerce B2b
by Adobe · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
141
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities141In the news12Timeline
Severity mix
Critical 9High 57Medium 62Low 13
Severity
All severities141Critical9High57Medium62Low13
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Commerce B2b to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-75650
In wildKEV
10.0
4%
Sep 7
Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-48356
In wildKEV
9.3
59%
Jul 14
Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-71362
In wildKEV
9.1
90%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-54236
In wildKEV
9.1
95%
Sep 9
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2024-45115
9.8
1%
Oct 10
Adobe Commerce | Improper Authentication (CWE-287)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-76200
9.3
1%
Sep 8
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-76201
9.3
1%
Sep 8
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-48358
9.1
1%
Jul 14
Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-24434
9.1
17%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.4; +8 more
CVE-2024-45148
8.8
1%
Oct 10
Adobe Commerce | Improper Authentication (CWE-287)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-77111
8.7
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-48414
8.7
0%
Aug 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more
CVE-2026-48413
8.7
1%
Aug 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more
CVE-2026-47994
8.7
1%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-34686
8.7
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-34653
8.7
1%
May 12
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21290
8.7
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-49557
8.7
1%
Aug 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-24414
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24415
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24416
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24413
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24438
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.4; +8 more
CVE-2025-24417
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24412
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24410
8.7
1%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2026-77109
8.6
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-77774
8.6
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-47988
8.6
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-47110
8.4
1%
Jun 10
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +16 more
CVE-2026-48415
8.3
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more
CVE-2026-76202
8.2
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-47984
8.2
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-43585
8.2
1%
Jun 10
Adobe Commerce | Improper Authorization (CWE-285)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +16 more
CVE-2025-24409
8.2
1%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2026-47995
8.1
1%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21284
8.1
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21361
8.1
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-54263
8.1
1%
Oct 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-54264
8.1
1%
Oct 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-49555
8.1
1%
Aug 12
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-43586
8.1
1%
Jun 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +16 more
CVE-2025-24411
8.1
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24418
8.1
1%
Feb 11
Adobe Commerce | Improper Authorization (CWE-285)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2024-45116
8.1
1%
Oct 10
Adobe Commerce | Cross-site Scripting (XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-21311
8.0
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-77110
7.6
1%
Sep 8
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2024-45117
7.6
1%
Oct 10
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-77108
7.5
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-48416
7.5
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more
Page 1 of 3 · 141 total
123