PT-2026-58773 · Adobe · Commerce+5

CVE-2026-47996 · Publicado 2026-07-14 · Atualizado 2026-07-14

NVD

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope is changed.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-47996

Produtos afetados

Commerce

Commerce B2B

Commerce Webhooks Plugin

Magento Open Source

I/O Events

Magento

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-47996 · Nota de Segurança
• https://helpx.adobe.com/security/products/magento/apsb26-73.html · Aviso do Fabricante