Incorrect Authorization Issue in Adobe Commerce Software

CVE-2025-49556

What is CVE-2025-49556?

Adobe Commerce versions 2.4.9-alpha1 and earlier exhibit a vulnerability that allows attackers to bypass security features through Incorrect Authorization. This can lead to unauthorized read access to sensitive data without the need for user interaction, creating significant security risks for affected systems. It is essential for users of these versions to address this flaw promptly to safeguard their data against potential exploitation.

References