Skip to content
Threat Feed

Product

Commerce <= 2.4.8-P4

1 brief RSS
high threat

Adobe Commerce Incorrect Authorization Vulnerability (CVE-2026-34645)

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Incorrect Authorization vulnerability (CVE-2026-34645) that could allow an attacker to bypass security measures and gain unauthorized write access without user interaction.

Commerce <= 2.4.9-beta1 +5 cve security-bypass web-application
2r 1t 1c