Cpe:2.3:a:adobe:commerce_b2b:1.5.2:*:*:*:*:*:*:*

CVE-2026-48356 is an unrestricted file upload vulnerability in Adobe Commerce REST and WYSIWYG endpoints, enabling potential remote code execution via the pub/media directory.