Servers and applications
CVE-2025-49558
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the timing between the check of a resource's state and its use, allowing unauthorized write access.…
- Severity
- Medium 5.9
- Published
- 12 Aug 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 2.4.4, 2.4.5
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Magento / Adobe CommerceServers and applications · cpe:a:adobe:commerce |
All 54 release lines
|
Magento / Adobe CommerceServers and applications · cpe:a:adobe:magento |
All 42 release lines
|