Improper Access Control in Adobe Commerce by Adobe

CVE-2025-27207

What is CVE-2025-27207?

Adobe Commerce is affected by an improper access control vulnerability that may allow low privileged attackers to circumvent security measures and gain unauthorized read access to sensitive information. This flaw can be exploited without requiring user interaction, potentially leading to serious implications for data privacy and security. Users are encouraged to review the affected versions and apply necessary updates to mitigate this risk.

References