Adobe Commerce Events
Adobe- Product type
- Other
- Catalog vulnerabilities
- 14
Severity across 14 analyzed records
Verify to analyze this security profile
en
As of 09/15/2026, within CyStack's analyzed data, Adobe Commerce Events has 14 security vulnerabilities published in the last 90 days. Of these, 7 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Adobe Commerce Events and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-47984Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-47997Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-47988Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-47999Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-48358Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityCritical |
CVE-2026-48356Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityCritical |
CVE-2026-47998Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-48000Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-47995Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-48001Adobe Commerce | Information Exposure (CWE-200) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityLow |
CVE-2026-48371Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-47996Adobe Commerce | Incorrect Authorization (CWE-863) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityMedium |
CVE-2026-47994Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |
CVE-2026-47992Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | Exploitation statusNot known exploited | FixYes | Published07/14/2026 | SeverityHigh |