Adobe Commerce
- Software type
- E-commerce platform
- Total vulnerabilities (90 days)
en
As of 10/23/2026, Adobe Commerce recorded 27 security vulnerabilities in the last 90 days, of which 24 are rated High or Critical. Notably, 1 of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Adobe Commerce and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-95631Adobe Commerce | Improper Input Validation (CWE-20)CVE-2026-103849Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)CVE-2026-92910Adobe Commerce | Incorrect Authorization (CWE-863)CVE-2026-91013Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)CVE-2026-92464Adobe Commerce | Improper Input Validation (CWE-20)| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-95631Adobe Commerce | Improper Input Validation (CWE-20) | Exploitation statusNot exploited | FixYes |
| SeverityHigh |
CVE-2026-103849Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) | Exploitation statusActively exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
CVE-2026-92910Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-91013Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
CVE-2026-92464Adobe Commerce | Improper Input Validation (CWE-20) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
CVE-2026-95630Adobe Commerce | Improper Input Validation (CWE-20) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityMedium |
|---|
CVE-2026-92922Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-92908Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityHigh |
|---|
CVE-2026-92909Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
CVE-2026-100133Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot exploited | FixYes | Published10/13/2026 | SeverityCritical |
|---|
210 Results | Page 1 of 21