What’s Vulnerable › Products

Adobe Magento Open Source vulnerabilities

43 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.

Check whether your Adobe Magento Open Source version is affected

Latest Adobe Magento Open Source vulnerabilities

• CVE-2026-95631 — Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 8.7)
• CVE-2026-95630 — Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 4.3)
• CVE-2026-92922 — Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.1)
• CVE-2026-92911 — Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 8.7)
• CVE-2026-92910 — Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 7.2)
• CVE-2026-92909 — Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 9.8)
• CVE-2026-92908 — Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 8.3)
• CVE-2026-92464 — Adobe Commerce | Improper Input Validation (CWE-20) (CVSS 9.1)
• CVE-2026-91013 — Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3)
• CVE-2026-103849 — Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) (CVSS 10.0)
• CVE-2026-100133 — Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (CVSS 9.3)
• CVE-2022-24093 — Adobe Commerce post-auth improper input validation leads to remote code execution (CVSS 7.2)
• CVE-2023-22251 — Adobe Commerce Incorrect Authorization Security feature bypass (CVSS 4.3)
• CVE-2023-22250 — Adobe Commerce Improper Access Control Security feature bypass (CVSS 5.3)
• CVE-2023-22249 — Adobe Commerce Stored XSS Arbitrary code execution (CVSS 4.8)
• CVE-2023-22247 — Adobe Commerce XML Injection Arbitrary file system read (CVSS 7.5)
• CVE-2022-35698 — Adobe Commerce Stored XSS Arbitrary code execution (CVSS 5.4)
• CVE-2022-35689 — Adobe Commerce Improper Access Control Security feature bypass (CVSS 5.3)
• CVE-2021-39864 — Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition (CVSS 4.3)
• CVE-2021-36044 — Magento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service (CVSS 5.0)
• CVE-2021-36043 — Magento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution (CVSS 6.6)
• CVE-2021-36042 — Magento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution (CVSS 7.2)
• CVE-2021-36041 — Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
• CVE-2021-36040 — Magento Commerce Improper Input Validation Could Lead To Remote Code Execution (CVSS 7.2)
• CVE-2021-36039 — Magento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure (CVSS 4.0)