CVE-2026-71362

Critical KEV · actively exploited PoC available

CVSS base score

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.

Vendor

—

Product

—

Affected

—

Weakness

CWE-863 · Authorization

Published

Aug 11, 2026

Last modified

Aug 12, 2026

CVSS version

v3.1

Views

// References & exploits

https://helpx.adobe.com/security/products/magento/apsb26-92.html

NVD record Search PoCs