Known Exploited Vulnerabilities October 24, 2025 · CISA KEV Catalog

CVE-2025-54236: Adobe Commerce and Magento Improper Input Validation Vulnerability

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

AdobeCVE-2025-54236

Related

CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026

CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Sep 24, 2026

CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Known Exploited Vulnerabilities · Sep 08, 2026