PT-2026-58798 · Adobe · Commerce+3

Publicado 2026-07-14 · Atualizado 2026-07-14 · CVE-2026-48358

NVD

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. Scope is changed.

Correção

Improper Encoding or Escaping of Output

Enumeração de Fraquezas

CWE-116

Identificadores relacionados

CVE-2026-48358

Produtos afetados

Commerce

Commerce B2B

Commerce Webhooks Plugin

Magento Open Source

Referências · 2

• https://helpx.adobe.com/security/products/magento/apsb26-73.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-48358 · Nota de Segurança