CVE-2026-48356 — Vulnerability intelligence

Adobe — Commerce and Magento

Published: 2026-07-14T19:44:17.036Z

CVSS

9.3

CISA KEV

Known exploitation

Original source text (not a translation)

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.

Sources

• Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-48356