CVE-2026-48412

Published: Aug 11, 2026Modified: Sep 25, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction.

Affected (125)

Products: Adobe: Commerce, Magento, Commerce B2b

3 products

Configuration A

66 vulnerable

Vulnerable Software	Affected Versions
Adobe Commerce	Version 2.4.4 p10
Adobe Commerce	Version 2.4.4 p11
Adobe Commerce	Version 2.4.4 p12
Adobe Commerce	Version 2.4.4 p13
Adobe Commerce	Version 2.4.4 p14
Adobe Commerce	Version 2.4.4 p15
Adobe Commerce	Version 2.4.4 p16
Adobe Commerce	Version 2.4.4 p17
Adobe Commerce	Version 2.4.4 p18
Adobe Commerce	Version 2.4.4 p1
Adobe Commerce	Version 2.4.4 p2
Adobe Commerce	Version 2.4.4 p3
Adobe Commerce	Version 2.4.4 p4
Adobe Commerce	Version 2.4.4 p5
Adobe Commerce	Version 2.4.4 p6
Adobe Commerce	Version 2.4.4 p7
Adobe Commerce	Version 2.4.4 p8
Adobe Commerce	Version 2.4.4 p9
Adobe Commerce	Version 2.4.5 p10
Adobe Commerce	Version 2.4.5 p11
Adobe Commerce	Version 2.4.5 p12
Adobe Commerce	Version 2.4.5 p13
Adobe Commerce	Version 2.4.5 p14
Adobe Commerce	Version 2.4.5 p15
Adobe Commerce	Version 2.4.5 p16
Adobe Commerce	Version 2.4.5 p17
Adobe Commerce	Version 2.4.5 p1
Adobe Commerce	Version 2.4.5 p2
Adobe Commerce	Version 2.4.5 p3
Adobe Commerce	Version 2.4.5 p4
Adobe Commerce	Version 2.4.5 p5
Adobe Commerce	Version 2.4.5 p6
Adobe Commerce	Version 2.4.5 p7
Adobe Commerce	Version 2.4.5 p8
Adobe Commerce	Version 2.4.5 p9
Adobe Commerce	Version 2.4.6 p10
Adobe Commerce	Version 2.4.6 p11
Adobe Commerce	Version 2.4.6 p12
Adobe Commerce	Version 2.4.6 p13
Adobe Commerce	Version 2.4.6 p14
Adobe Commerce	Version 2.4.6 p15
Adobe Commerce	Version 2.4.6 p1
Adobe Commerce	Version 2.4.6 p2
Adobe Commerce	Version 2.4.6 p3
Adobe Commerce	Version 2.4.6 p4
Adobe Commerce	Version 2.4.6 p5
Adobe Commerce	Version 2.4.6 p6
Adobe Commerce	Version 2.4.6 p7
Adobe Commerce	Version 2.4.6 p8
Adobe Commerce	Version 2.4.6 p9
Adobe Commerce	Version 2.4.7 p10
Adobe Commerce	Version 2.4.7 p1
Adobe Commerce	Version 2.4.7 p2
Adobe Commerce	Version 2.4.7 p3
Adobe Commerce	Version 2.4.7 p4
Adobe Commerce	Version 2.4.7 p5
Adobe Commerce	Version 2.4.7 p6
Adobe Commerce	Version 2.4.7 p7
Adobe Commerce	Version 2.4.7 p8
Adobe Commerce	Version 2.4.7 p9
Adobe Commerce	Version 2.4.8 p1
Adobe Commerce	Version 2.4.8 p2
Adobe Commerce	Version 2.4.8 p3
Adobe Commerce	Version 2.4.8 p4
Adobe Commerce	Version 2.4.8 p5
Adobe Commerce	Version 2.4.9

Configuration B

31 vulnerable

Vulnerable Software	Affected Versions
Adobe Magento	Version 2.4.6 p10
Adobe Magento	Version 2.4.6 p11
Adobe Magento	Version 2.4.6 p12
Adobe Magento	Version 2.4.6 p13
Adobe Magento	Version 2.4.6 p14
Adobe Magento	Version 2.4.6 p15
Adobe Magento	Version 2.4.6 p1
Adobe Magento	Version 2.4.6 p2
Adobe Magento	Version 2.4.6 p3
Adobe Magento	Version 2.4.6 p4
Adobe Magento	Version 2.4.6 p5
Adobe Magento	Version 2.4.6 p6
Adobe Magento	Version 2.4.6 p7
Adobe Magento	Version 2.4.6 p8
Adobe Magento	Version 2.4.6 p9
Adobe Magento	Version 2.4.7 p10
Adobe Magento	Version 2.4.7 p1
Adobe Magento	Version 2.4.7 p2
Adobe Magento	Version 2.4.7 p3
Adobe Magento	Version 2.4.7 p4
Adobe Magento	Version 2.4.7 p5
Adobe Magento	Version 2.4.7 p6
Adobe Magento	Version 2.4.7 p7
Adobe Magento	Version 2.4.7 p8
Adobe Magento	Version 2.4.7 p9
Adobe Magento	Version 2.4.8 p1
Adobe Magento	Version 2.4.8 p2
Adobe Magento	Version 2.4.8 p3
Adobe Magento	Version 2.4.8 p4
Adobe Magento	Version 2.4.8 p5
Adobe Magento	Version 2.4.9

Configuration C

28 vulnerable

Vulnerable Software	Affected Versions
Adobe Commerce B2b	Version 1.3.3 p10
Adobe Commerce B2b	Version 1.3.3 p1
Adobe Commerce B2b	Version 1.3.3 p2
Adobe Commerce B2b	Version 1.3.3 p3
Adobe Commerce B2b	Version 1.3.3 p4
Adobe Commerce B2b	Version 1.3.3 p5
Adobe Commerce B2b	Version 1.3.3 p6
Adobe Commerce B2b	Version 1.3.3 p7
Adobe Commerce B2b	Version 1.3.3 p8
Adobe Commerce B2b	Version 1.3.3 p9
Adobe Commerce B2b	Version 1.3.4 p1
Adobe Commerce B2b	Version 1.3.4 p2
Adobe Commerce B2b	Version 1.3.4 p3
Adobe Commerce B2b	Version 1.3.4 p4
Adobe Commerce B2b	Version 1.3.4 p5
Adobe Commerce B2b	Version 1.3.4 p6
Adobe Commerce B2b	Version 1.3.4 p7
Adobe Commerce B2b	Version 1.3.4 p8
Adobe Commerce B2b	Version 1.3.4 p9
Adobe Commerce B2b	Version 1.3.5 p1
Adobe Commerce B2b	Version 1.3.5 p2
Adobe Commerce B2b	Version 1.3.5 p3
Adobe Commerce B2b	Version 1.3.5 p4
Adobe Commerce B2b	Version 1.3.5 p5
Adobe Commerce B2b	Version 1.3.5 p6
Adobe Commerce B2b	Version 1.3.5 p7
Adobe Commerce B2b	Version 1.4.2 p1
Adobe Commerce B2b	Version 1.4.2 p2

Related CWEs

CWE-863

Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

References (1)

https://helpx.adobe.com/security/products/magento/apsb26-92.html

Source: psirt@adobe.com

Vendor Advisory

Timeline

No history available yet.