vulnti.work

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass sec…

Medium CVSS 6.5
CVECVE-2026-48411
First seen2026-09-25 16:31 UTC
Disclosed2026-08-11 18:17 UTC
Last updated2026-09-25 16:31 UTC
Channel statusauto

Summary

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :
  • :
  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD