KNOWN EXPLOITED VULNERABILITY DOSSIER

CVE-2026-71362

Adobe · Commerce and Magento

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

CISA KEV Added: 2026-09-24
Severity Rating: High (CVSS 9)
Legal Indictments: 0 Cases
Catalog Status: Active KEV Mandate

Correlated Federal Court Cases & Exploitation Context (0)

No federal court indictment in the current archive directly cites CVE-2026-71362. This record tracks its addition to the CISA Known Exploited Vulnerabilities (KEV) catalog on 2026-09-24.

Associated Government Advisories

Tracked under CISA Known Exploited Vulnerabilities Binding Operational Directive 22-01 for federal civilian agency remediation.

← Back to All CVEs Explore ATT&CK Matrix →