Improper Input Validation in Adobe Commerce by Adobe
CVE-2026-95630

4.3MEDIUM

Key Information:

Vendor

Adobe
Status
Adobe Commerce
Adobe Commerce B2b
Magento Open Source
Vendor
CVE Published:
13 October 2026

What is CVE-2026-95630?

Adobe Commerce is susceptible to an improper input validation issue that may permit low-privileged attackers to bypass essential security features. This vulnerability allows unauthorized users to read sensitive information without needing any user interaction, potentially exposing critical data. Organizations utilizing Adobe Commerce need to be aware of this flaw and implement appropriate measures to mitigate risks.

Affected Version(s)

Adobe Commerce 0 <= 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep, 2.4.6-2026-sep, 2.4.5-2026-sep, 2.4.4-2026-sep

Adobe Commerce B2B 0 <= 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep

Magento Open Source 0 <= 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep

References

https://www.adobe.com/trust/security/products/commerce/ap...
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.