Security
Loading…

CVE-2026-92910

HIGHCVSS 7.2
Description

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.

Timeline
Published:October 13th, 2026 7:21 PM
Last modified:October 14th, 2026 4:17 PM
CVSS Scoring

CVSS v3: 7.2 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports

Source: NIST NVD · Data may lag official sources by up to one minute