CVE-2026-48356 2

Vulnerability (CVE)

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cyber Risks CISA Advisories Oct 27, 2026

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-48356 Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-111497...

Vulnerabilities & Patching

CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Oct 27, 2026

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account...

Vulnerabilities & Patching