VulnerabilityUndergoing Analysis

CVE-2026-48412

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

LOW 2.7EPSS 0.39%

Does this matter?

Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own.

Description

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction.

CVSS 3.1: 2.7 LOWCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
EPSS: 0.39% probability · 33th percentile
CISA KEV: Not listed
Weakness: CWE-863
Source: psirt@adobe.com

References

https://helpx.adobe.com/security/products/magento/apsb26-92.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.