CVE-2026-71362: Adobe Commerce is affected by an Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.

• CISA KEV-listed (remediation due 2026-09-27)
• EPSS 2.3% (82.8% percentile)
• CVSS 9.1 critical

Related briefings

• Hackers exploit WSO2 and Adobe Commerce flaws, CISA warns 2026-09-25

Browse the CVE database

Read the full analysis on IntelFusions