Advisories · Technology

Adobe Commerce Events.

Every CVE that names Adobe Commerce Events among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-47984 CVE record

CVSS 8.2 High

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-47997 CVE record

CVSS 5.9 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-47988 CVE record

CVSS 8.6 High

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-47999 CVE record

CVSS 4.8 Medium

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 14 Jul 2026
CVE-2026-48358 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)
- Adobe Commerce
- Adobe Commerce B2B
- CWE-116
Not analysed yet 14 Jul 2026
CVE-2026-48356 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)
- Adobe Commerce
- Adobe Commerce B2B
- Unrestricted file upload
Not analysed yet 14 Jul 2026
CVE-2026-47998 CVE record

CVSS 5.9 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-48000 CVE record

CVSS 6.1 Medium

Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
- Adobe Commerce
- Adobe Commerce B2B
- Open redirect
Not analysed yet 14 Jul 2026
CVE-2026-47995 CVE record

CVSS 8.1 High

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 14 Jul 2026
CVE-2026-48001 CVE record

CVSS 3.7 Low

Adobe Commerce | Information Exposure (CWE-200)
- Adobe Commerce
- Adobe Commerce B2B
- Information disclosure
Not analysed yet 14 Jul 2026
CVE-2026-48371 CVE record

CVSS 5.4 Medium

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 14 Jul 2026
CVE-2026-47996 CVE record

CVSS 6.8 Medium

Adobe Commerce | Incorrect Authorization (CWE-863)
- Adobe Commerce
- Adobe Commerce B2B
- Broken access control
Not analysed yet 14 Jul 2026
CVE-2026-47994 CVE record

CVSS 8.7 High

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- Adobe Commerce
- Adobe Commerce B2B
- Cross-site scripting (XSS)
Not analysed yet 14 Jul 2026
CVE-2026-47992 CVE record

CVSS 7.2 High

Adobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- Adobe Commerce
- Adobe Commerce B2B
- SQL injection
Not analysed yet 14 Jul 2026