Cpe:2.3:a:adobe:i\/O_events:*:*:*:*:*:commerce:*:*

CVE-2026-48356 is an unrestricted file upload vulnerability in Adobe Commerce REST and WYSIWYG endpoints, enabling potential remote code execution via the pub/media directory.