Login Request a demo
CO
E-commerce
Commerce
by Adobe · last CVE Oct 13, 2026
On CISA KEVExploited in the wild
261
CVEs
6
On KEV
10.0
Max CVSS
11
New 30D
Vulnerabilities261In the news12Timeline
Severity mix
Critical 23High 106Medium 118Low 14
Severity
All severities261Critical23High106Medium118Low14
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Commerce to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-77774
8.6
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug
CVE-2026-47988
8.6
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18
CVE-2025-47110
8.4
1%
Jun 10
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.4-p13
CVE-2024-39401
8.4
2%
Aug 14
Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Affected: through 2.4.4-p9
CVE-2024-39402
8.4
2%
Aug 14
Adobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Affected: through 2.4.4-p9
CVE-2026-92908
8.3
1%
Oct 13
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep
CVE-2026-48415
8.3
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-jul, 2.4.8-2026-jul, 2.4.7-2026-jul, 2.4.6-2026-jul
CVE-2026-76202
8.2
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug
CVE-2026-47984
8.2
1%
Jul 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18
CVE-2025-43585
8.2
1%
Jun 10
Adobe Commerce | Improper Authorization (CWE-285)
Affected: through 2.4.4-p13
CVE-2025-24409
8.2
1%
Feb 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.8-beta1
CVE-2024-34104
8.2
1%
Jun 13
Adobe Commerce | Improper Authorization (CWE-285)
Affected: through 2.4.4-p8
CVE-2026-92922
8.1
1%
Oct 13
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep
CVE-2026-47995
8.1
1%
Jul 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18
CVE-2026-21284
8.1
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15
CVE-2026-21361
8.1
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15
CVE-2025-54263
8.1
1%
Oct 14
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15
CVE-2025-54264
8.1
1%
Oct 14
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15
CVE-2025-49555
8.1
1%
Aug 12
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
Affected: through 2.4.4-p14
CVE-2025-43586
8.1
1%
Jun 10
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.4-p13
CVE-2025-24411
8.1
1%
Feb 11
Adobe Commerce | Improper Access Control (CWE-284)
Affected: through 2.4.8-beta1
CVE-2025-24418
8.1
1%
Feb 11
Adobe Commerce | Improper Authorization (CWE-285)
Affected: through 2.4.8-beta1
CVE-2024-45116
8.1
1%
Oct 10
Adobe Commerce | Cross-site Scripting (XSS) (CWE-79)
Affected: through 2.4.4-p10
CVE-2024-39400
8.1
1%
Aug 14
DOM XSS through integrations can impact other admins
Affected: through 2.4.4-p9
CVE-2024-34103
8.1
1%
Jun 13
Customer account takeover via web API call & subsequent password reset
Affected: through 2.4.4-p8
CVE-2024-20759
8.1
1%
Apr 10
Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…
Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +18 more
CVE-2021-21013
8.1
3%
Jan 13
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module
Affected: through 2.4.1; 2.4.1 and later
CVE-2020-8818
8.1
4%
Feb 25
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2
Affected: 2.3.4
CVE-2026-21311
8.0
0%
Mar 11
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16
CVE-2024-49521
7.7
1%
Nov 12
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
Affected: through 3.2.5
CVE-2024-39399
7.7
1%
Aug 14
[Paris] Path Traversal lead to local file read
Affected: through 2.4.4-p9
CVE-2026-77110
7.6
1%
Sep 8
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug
CVE-2024-45117
7.6
1%
Oct 10
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 2.4.4-p10
CVE-2024-39403
7.6
1%
Aug 14
Stored XSS through Webhook module public key configuration
Affected: through 2.4.4-p9
CVE-2026-77108
7.5
1%
Sep 8
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug
CVE-2026-48416
7.5
1%
Aug 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-2026-jul, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug
CVE-2026-34650
7.5
15%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-34652
7.5
1%
May 12
Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-34645
7.5
1%
May 12
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17
CVE-2026-34648
7.5
21%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-34649
7.5
14%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-34651
7.5
1%
May 12
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-34646
7.5
0%
May 12
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14
CVE-2026-21309
7.5
1%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16
CVE-2026-21289
7.5
1%
Mar 11
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15
CVE-2025-49556
7.5
1%
Aug 12
Adobe Commerce | Incorrect Authorization (CWE-863)
Affected: through 2.4.4-p14
CVE-2025-49554
7.5
1%
Aug 12
Adobe Commerce | Improper Input Validation (CWE-20)
Affected: through 2.4.4-p14
CVE-2025-24406
7.5
1%
Feb 11
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Affected: through 2.4.8-beta1
CVE-2023-38220
7.5
1%
Oct 13
Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization…
Affected: 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.5; 2.4.5; +7 more
CVE-2023-38207
7.5
1%
Aug 9
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) vulnerability that…
Affected: before 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; 2.4.4; +6 more
Page 2 of 6 · 261 total
123…6