Dependency Vulnerability in Adobe Commerce Affects Multiple Versions

CVE-2026-34654

What is CVE-2026-34654?

Adobe Commerce versions up to 2.4.9-beta1 are susceptible to a dependency on a vulnerable third-party component, potentially allowing an attacker to crash the application. This vulnerability could result in a denial-of-service condition without requiring user interaction, exposing systems to significant operational risks. Organizations using affected versions should take immediate steps to mitigate the threat by applying security updates and monitoring their environments.

References