CVE-2026-76202

תיאור (מקור, אנגלית)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user interaction.

מדדים

CVSS 3.1

8.2 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-11/10/2026

CWE

CWE-863

מוצרים מושפעים

adobe: commerce; adobe: commerce b2b; adobe: magento

קישורים

• https://helpx.adobe.com/security/products/magento/apsb26-138.html Vendor Advisory