Known Exploited Vulnerabilities July 17, 2024 · CISA KEV Catalog

CVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

AdobeCVE-2024-34102

Related

CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026

CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability Known Exploited Vulnerabilities · Sep 24, 2026

CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability Known Exploited Vulnerabilities · Sep 08, 2026