Adobe Magento Open Source: Mehrere Schwachstellen
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in Adobe Magento Open Source ausnutzen, um beliebigen Programmcode auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen sowie Daten offenzulegen oder zu manipulieren.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-394412 linked CVEs
Open advisory with all CVEs
More on Magento
Other advisories
- CriticalCVE-2026-47995Adobe Magento: Mehrere Schwachstellen
- Not ratedosv:ROOT-APP-COMPOSER-CVE-2026-71362CVE-2026-71362 in magento/product-enterprise-edition - Patched by Root
- Not ratedosv:ROOT-APP-COMPOSER-CVE-2026-92909CVE-2026-92909 in magento/product-enterprise-edition - Patched by Root
- Not ratedosv:ROOT-APP-COMPOSER-CVE-2026-75650CVE-2026-75650 in magento/product-enterprise-edition - Patched by Root
- Not ratedosv:ROOT-APP-COMPOSER-AIKIDO-2026-123768AIKIDO-2026-123768 in magento/product-enterprise-edition - Patched by Root
- Not ratedosv:ROOT-APP-COMPOSER-AIKIDO-2026-825761AIKIDO-2026-825761 in magento/product-community-edition - Patched by Root
- Not ratedosv:ROOT-APP-COMPOSER-AIKIDO-2026-980640AIKIDO-2026-980640 in magento/product-community-edition - Patched by Root
- Not ratedosv:ROOT-APP-COMPOSER-AIKIDO-2026-305688AIKIDO-2026-305688 in magento/product-community-edition - Patched by Root
Other news entries
- Angreifer nehmen Brotli-, Adobe-Commerce- und Magento-Lecks ins VisierNewsheise Security
- Adobe Magento: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic EmergesNewsThe Hacker News
- Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on MagentoNewsThe Hacker News
- Critical BlockStrap flaw lets hackers run code on Magento serversNewsBleepingComputer
- Adobe Magento Open Source: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEVNewsThe Hacker News
- Adobe Magento Open Source: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit AdministratorrechtenVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3944
ID