CVE-2026-47988

Опубликовано: 14 июл. 2026

Источник: nvd

CVSS3: 8.6

CVSS3: 9.1

EPSS Низкий

Описание

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction.

Ссылки

https://helpx.adobe.com/security/products/magento/apsb26-73.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p17:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p15:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.8:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce:2.4.9:-:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p18:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p17:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p10:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.2:p5:*:*:*:*:*:*

cpe:2.3:a:adobe:commerce_b2b:1.5.3:-:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p15:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p10:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.8:p5:*:*:open_source:*:*:*

cpe:2.3:a:adobe:magento:2.4.9:-:*:*:open_source:*:*:*

Конфигурация 4

cpe:2.3:a:adobe:i\/o_events:*:*:*:*:*:commerce:*:*

Версия от 1.6.0 (включая) до 1.21.0 (исключая)

EPSS

Процентиль: 41%

0.00525

Низкий

8.6 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-863

Связанные уязвимости

GHSA-5pcm-62qr-xhc5

CVSS3: 8.6

github

18 дней назад

BDU:2026-10051

CVSS3: 8.6

fstec

18 дней назад

Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B, связанная с недостатками механизма авторизации, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 41%

0.00525

Низкий

8.6 High

CVSS3

9.1 Critical

CVSS3

Дефекты

CWE-863