PT-2026-24565 · Adobe · Commerce

Michele Damico · Publicado 2026-03-10 · Atualizado 2026-03-11 · CVE-2026-21359

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p16 and earlier Adobe Commerce versions 2.4.5-p15 Adobe Commerce versions 2.4.6-p13 Adobe Commerce versions 2.4.7-p8 Adobe Commerce versions 2.4.8-p3 Adobe Commerce versions 2.4.9-alpha3

Description The software contains an Incorrect Authorization issue that could lead to a Security feature bypass. An attacker could potentially bypass security measures, resulting in limited impact to data integrity and availability. Exploitation of this issue is conditional and does not require user interaction.

Recommendations Update Adobe Commerce versions prior to 2.4.4-p16. Update Adobe Commerce versions prior to 2.4.5-p15. Update Adobe Commerce versions prior to 2.4.6-p13. Update Adobe Commerce versions prior to 2.4.7-p8. Update Adobe Commerce versions prior to 2.4.8-p3. Update Adobe Commerce versions prior to 2.4.9-alpha3.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

BDU:2026-03230

CVE-2026-21359

Produtos afetados

Commerce

Referências · 6

• https://helpx.adobe.com/security/products/magento/apsb26-05.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-21359 · Aviso do Fabricante
• https://t.me/CVEtracker/47080 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2031597258840616988 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-21359 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-03230 · Nota de Segurança