Login Request a demo
CB
Product
Commerce B2b
by Adobe · last CVE Sep 8, 2026
On CISA KEVExploited in the wild
141
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities141In the news12Timeline
Severity mix
Critical 9High 57Medium 62Low 13
Severity
All severities141Critical9High57Medium62Low13
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Commerce B2b to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47996
6.8
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21360
6.8
1%
Mar 11
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-54267
6.5
0%
Oct 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-27207
6.5
1%
Jun 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +16 more
CVE-2025-24422
6.5
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24424
6.5
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24427
6.5
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24426
6.5
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2025-24408
6.5
1%
Feb 11
Adobe Commerce | Information Exposure (CWE-200)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2024-45132
6.5
1%
Oct 10
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2024-45118
6.5
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-48000
6.1
0%
Jul 14
Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2024-45123
6.1
0%
Oct 10
Adobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-47997
5.9
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-47998
5.9
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-54265
5.9
1%
Oct 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-49558
5.9
0%
Aug 12
Adobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21293
5.5
0%
Mar 11
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21294
5.5
0%
Mar 11
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-48371
5.4
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21292
5.4
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-24437
5.4
0%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.4; +8 more
CVE-2025-24428
5.4
0%
Feb 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2024-45128
5.4
1%
Oct 10
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2024-45131
5.4
0%
Oct 10
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-34654
5.3
1%
May 12
Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21282
5.3
1%
Mar 11
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21286
5.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21310
5.3
0%
Mar 11
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-49559
5.3
1%
Aug 12
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-27206
5.3
0%
Jun 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +16 more
CVE-2025-27190
5.3
1%
Apr 8
Adobe Commerce | Improper Access Control (CWE-284)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +14 more
CVE-2025-27191
5.3
0%
Apr 8
Adobe Commerce | Improper Access Control (CWE-284)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +13 more
CVE-2025-24425
5.3
1%
Feb 11
Adobe Commerce | Business Logic Errors (CWE-840)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; 1.3.4; +9 more
CVE-2024-45124
5.3
1%
Oct 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-48411
4.9
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +22 more
CVE-2024-45119
4.9
1%
Oct 10
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-47999
4.8
0%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-34658
4.8
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-34655
4.8
0%
May 12
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21291
4.8
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-54266
4.8
0%
Oct 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2024-45127
4.8
0%
Oct 10
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: 1.3.3; 1.3.3; 1.3.4; 1.3.4; 1.3.5; 1.3.5; +3 more
CVE-2026-21359
4.7
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-34656
4.3
0%
May 12
Adobe Commerce | Improper Authorization (CWE-285)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21297
4.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21285
4.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2026-21296
4.3
0%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-49550
4.3
0%
Jun 25
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; +34 more
CVE-2025-27188
4.3
1%
Apr 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: before 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.3; 1.3.4; +14 more
Page 1 of 2 · 62 total
12