Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Mô tả

Tham khảo

• helpx.adobe.com/security/products/magento/apsb26-73.html · Vendor Advisory
• sansec.io/research/magento-cms-block-loader-deepveindrilling · Third Party Advisory
• sansec.io/research/polyshell-mass-attack-wave · Third Party Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2026-48356

Lỗ hổng khác của commerce

• CVE-2026-77774CAO 8.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could lev…
• CVE-2026-77111CAO 8.7Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high…
• CVE-2026-77110CAO 7.6Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could res…
• CVE-2026-77109CAO 8.6Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage…
• CVE-2026-77108CAO 7.5Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage…