Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

概要

参考情報

• helpx.adobe.com/security/products/magento/apsb26-73.html · Vendor Advisory
• sansec.io/research/magento-cms-block-loader-deepveindrilling · Third Party Advisory
• sansec.io/research/polyshell-mass-attack-wave · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-48356

commerce のその他の脆弱性

• CVE-2026-77774高 8.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could lev…
• CVE-2026-77111高 8.7Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high…
• CVE-2026-77110高 7.6Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could res…
• CVE-2026-77109高 8.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage…
• CVE-2026-77108高 7.5Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage…