CVE-2026-77109

תיאור (מקור, אנגלית)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed.

מדדים

CVSS 3.1

8.6 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-11/10/2026

CWE

CWE-863

מוצרים מושפעים

adobe: commerce; adobe: commerce b2b; adobe: magento

קישורים

• https://helpx.adobe.com/security/products/magento/apsb26-138.html Vendor Advisory