CVE-2026-48356

Vendor

Adobe

Product

Commerce and Magento

EPSS

0.45 (p99)

CISA KEV

added 27 Oct 2026, due 10 Nov 2026 (9d)

Weakness

CWE-434

Exposure class

Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 80
   KEV CISA KEV 5d ago

   Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

   Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control…

   KEV · due 10 Nov 2026 EPSS 0.45 Fix available CVE-2026-48356 Adobe
2. 69
   CISA alert CISA 4d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type…

   Exploited EPSS 0.83 CVE-2026-48356CVE-2026-111497 Google Adobe
3. 30
   CCCS advisory CCCS 4d ago

   Adobe security advisory (AV26-697)

   EPSS 0.45 CVE-2026-48356 Adobe