Improper Authorization Flaw in Adobe Commerce Products
CVE-2026-21359

4.7MEDIUM

Key Information:

Vendor

Adobe
Status
Adobe Commerce
Vendor
CVE Published:
11 March 2026

What is CVE-2026-21359?

Adobe Commerce has been found to have an improper authorization vulnerability that allows attackers to potentially bypass critical security features. This could result in limited access to the system's integrity and availability, allowing unauthorized actions without user interaction. Exploitability of this vulnerability depends on conditions outside the attacker's control, highlighting the need for vigilance and immediate updates to protect sensitive data.

Affected Version(s)

Adobe Commerce 0 <= 2.4.4-p16

References

https://helpx.adobe.com/security/products/magento/apsb26-...
vendor-advisory

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.