Product by Adobe
I\/o Events
14 known vulnerabilities in I\/o Events (Adobe), 1 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-48356 | Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) In CISA KEValso in 7 other products | 9.3 | |
| Critical | CVE-2026-48358 | Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116) | 9.1 | |
| High | CVE-2026-47988 | Adobe Commerce | Incorrect Authorization (CWE-863) | 8.6 | |
| High | CVE-2026-47992 | Adobe Commerce: SQL Injection | 7.2 | |
| High | CVE-2026-47994 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | 8.7 | |
| High | CVE-2026-47984 | Adobe Commerce | Incorrect Authorization (CWE-863) | 8.2 | |
| High | CVE-2026-47995 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | 8.1 | |
| Medium | CVE-2026-47996 | Adobe Commerce | Incorrect Authorization (CWE-863) | 6.8 | |
| Medium | CVE-2026-47997 | Adobe Commerce | Incorrect Authorization (CWE-863) | 5.9 | |
| Medium | CVE-2026-47998 | Adobe Commerce | Incorrect Authorization (CWE-863) | 5.9 | |
| Medium | CVE-2026-48000 | Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601) | 6.1 | |
| Medium | CVE-2026-48371 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | 5.4 | |
| Medium | CVE-2026-47999 | Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) | 4.8 | |
| Low | CVE-2026-48001 | Adobe Commerce | Information Exposure (CWE-200) | 3.7 |