CVE-2026-71362
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.
- Published Aug 11, 2026
- CVSS 9.1 critical
- 87.5% chance of exploitation in the next 30 days (EPSS)
- In CISA's Known Exploited Vulnerabilities catalog
Affected software
In the news
- WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV The Hacker News ·
- CISA Adds Two Known Exploited Vulnerabilities to Catalog CISA ·
- Adobe security advisory (AV26-808) – Update 2 Canadian Centre for Cyber Security ·
- Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution CIS MS-ISAC ·