CVE-2026-71362

Published 24 September 2026 · tracked since 25 September 2026

Description

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-120151 HIGH 8.8
• CVE-2026-120150 HIGH 8.8
• CVE-2026-120149 HIGH 8.8
• CVE-2026-120147 HIGH 8.8
• CVE-2026-120145 HIGH 8.8
• CVE-2026-120144 HIGH 8.8
• CVE-2026-120143 HIGH 8.8
• CVE-2026-120142 HIGH 8.8
• CVE-2026-120141 HIGH 8.8
• CVE-2026-120139 HIGH 8.8

→ Open the live CVE board · all tools