CVE-2026-71362

Vendor

Adobe

Product

Commerce and Magento

CVSS

9.1

EPSS

1.00 (p100)

CISA KEV

added 24 Sep 2026, due 27 Sep 2026 (35d overdue)

Weakness

CWE-863

Exposure class

Web platform, Identity

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 80
   KEV NVD 11 Aug 2026

   Adobe Commerce and Magento Incorrect Authorization Vulnerability

   Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

   KEV · due 27 Sep 2026 (overdue) CVSS 9.1 Fix available CVE-2026-71362 Adobe
2. 59
   CISA alert CISA 24 Sep 2026

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-5430 WSO2 Multiple Products Path Traversal Vulnerability CVE-2026-71362 Adobe…

   Exploited CVE-2026-5430CVE-2026-71362 Adobe
3. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more