Path Traversal Vulnerability in Adobe Commerce by Adobe
CVE-2026-21360

6.8MEDIUM

Key Information:

Vendor

Adobe
Status
Adobe Commerce
Vendor
CVE Published:
11 March 2026

What is CVE-2026-21360?

Adobe Commerce versions, including 2.4.9-alpha3 and earlier, are susceptible to a Path Traversal vulnerability. This flaw allows a high-privileged attacker to access files or directories outside the designated restricted areas. Exploitation of this vulnerability can occur without requiring user interaction, making it crucial for users to ensure proper security measures are in place to mitigate potential unauthorized access risks.

Affected Version(s)

Adobe Commerce 0 <= 2.4.4-p16

References

https://helpx.adobe.com/security/products/magento/apsb26-...
vendor-advisory

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.