Cpe:2.3:a:adobe:commerce_b2b:1.3.4:*:*:*:*:*:*:*

CVE-2026-48356 is an unrestricted file upload vulnerability in Adobe Commerce REST and WYSIWYG endpoints, enabling potential remote code execution via the pub/media directory.