Improper Input Validation in Adobe Commerce Web Application

CVE-2025-49554

What is CVE-2025-49554?

Adobe Commerce versions 2.4.9-alpha1 through 2.4.4-p14 are impacted by an improper input validation vulnerability. This flaw can be exploited by an attacker providing specially crafted input, leading to potential application crashes or unresponsive states. Notably, user interaction is not required for exploitation, making it a significant concern for users of the affected versions. Organizations using these versions should take immediate action to mitigate risks associated with this vulnerability to maintain the integrity and availability of their applications.

References