Servers and applications
CVE-2026-34685
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a…
- Severity
- Low 3.4
- Published
- 12 May 2026
- Last changed
- 28 Aug 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 2.4.4, 2.4.6
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Magento / Adobe CommerceServers and applications · cpe:a:adobe:commerce |
All 72 release lines
|
Magento / Adobe CommerceServers and applications · cpe:a:adobe:magento |
All 37 release lines
|