KNOWN EXPLOITED VULNERABILITY DOSSIER
CVE-2026-48356
Adobe · Commerce and Magento
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.
Correlated Federal Court Cases & Exploitation Context (0)
No federal court indictment in the current archive directly cites CVE-2026-48356. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-10-27.
Associated Government Advisories
Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.