CVE-2026-48412

EUVD-2026-56846
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.7 LOW
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 43.07%
Affected Products (NVD)
VendorProductVersion
adobecommerce
2.4.4:p1
adobecommerce
2.4.4:p10
adobecommerce
2.4.4:p11
adobecommerce
2.4.4:p12
adobecommerce
2.4.4:p13
adobecommerce
2.4.4:p14
adobecommerce
2.4.4:p15
adobecommerce
2.4.4:p16
adobecommerce
2.4.4:p17
adobecommerce
2.4.4:p18
adobecommerce
2.4.4:p2
adobecommerce
2.4.4:p3
adobecommerce
2.4.4:p4
adobecommerce
2.4.4:p5
adobecommerce
2.4.4:p6
adobecommerce
2.4.4:p7
adobecommerce
2.4.4:p8
adobecommerce
2.4.4:p9
adobecommerce
2.4.5:p1
adobecommerce
2.4.5:p10
adobecommerce
2.4.5:p11
adobecommerce
2.4.5:p12
adobecommerce
2.4.5:p13
adobecommerce
2.4.5:p14
adobecommerce
2.4.5:p15
adobecommerce
2.4.5:p16
adobecommerce
2.4.5:p17
adobecommerce
2.4.5:p2
adobecommerce
2.4.5:p3
adobecommerce
2.4.5:p4
adobecommerce
2.4.5:p5
adobecommerce
2.4.5:p6
adobecommerce
2.4.5:p7
adobecommerce
2.4.5:p8
adobecommerce
2.4.5:p9
adobecommerce
2.4.6:p1
adobecommerce
2.4.6:p10
adobecommerce
2.4.6:p11
adobecommerce
2.4.6:p12
adobecommerce
2.4.6:p13
adobecommerce
2.4.6:p14
adobecommerce
2.4.6:p15
adobecommerce
2.4.6:p2
adobecommerce
2.4.6:p3
adobecommerce
2.4.6:p4
adobecommerce
2.4.6:p5
adobecommerce
2.4.6:p6
adobecommerce
2.4.6:p7
adobecommerce
2.4.6:p8
adobecommerce
2.4.6:p9
adobecommerce
2.4.7:p1
adobecommerce
2.4.7:p10
adobecommerce
2.4.7:p2
adobecommerce
2.4.7:p3
adobecommerce
2.4.7:p4
adobecommerce
2.4.7:p5
adobecommerce
2.4.7:p6
adobecommerce
2.4.7:p7
adobecommerce
2.4.7:p8
adobecommerce
2.4.7:p9
adobecommerce
2.4.8:p1
adobecommerce
2.4.8:p2
adobecommerce
2.4.8:p3
adobecommerce
2.4.8:p4
adobecommerce
2.4.8:p5
adobecommerce
2.4.9
adobemagento
2.4.6:p1
adobemagento
2.4.6:p10
adobemagento
2.4.6:p11
adobemagento
2.4.6:p12
adobemagento
2.4.6:p13
adobemagento
2.4.6:p14
adobemagento
2.4.6:p15
adobemagento
2.4.6:p2
adobemagento
2.4.6:p3
adobemagento
2.4.6:p4
adobemagento
2.4.6:p5
adobemagento
2.4.6:p6
adobemagento
2.4.6:p7
adobemagento
2.4.6:p8
adobemagento
2.4.6:p9
adobemagento
2.4.7:p1
adobemagento
2.4.7:p10
adobemagento
2.4.7:p2
adobemagento
2.4.7:p3
adobemagento
2.4.7:p4
adobemagento
2.4.7:p5
adobemagento
2.4.7:p6
adobemagento
2.4.7:p7
adobemagento
2.4.7:p8
adobemagento
2.4.7:p9
adobemagento
2.4.8:p1
adobemagento
2.4.8:p2
adobemagento
2.4.8:p3
adobemagento
2.4.8:p4
adobemagento
2.4.8:p5
adobemagento
2.4.9
adobecommerce_b2b
1.3.3:p1
adobecommerce_b2b
1.3.3:p10
adobecommerce_b2b
1.3.3:p2
adobecommerce_b2b
1.3.3:p3
adobecommerce_b2b
1.3.3:p4
adobecommerce_b2b
1.3.3:p5
adobecommerce_b2b
1.3.3:p6
adobecommerce_b2b
1.3.3:p7
adobecommerce_b2b
1.3.3:p8
adobecommerce_b2b
1.3.3:p9
adobecommerce_b2b
1.3.4:p1
adobecommerce_b2b
1.3.4:p2
adobecommerce_b2b
1.3.4:p3
adobecommerce_b2b
1.3.4:p4
adobecommerce_b2b
1.3.4:p5
adobecommerce_b2b
1.3.4:p6
adobecommerce_b2b
1.3.4:p7
adobecommerce_b2b
1.3.4:p8
adobecommerce_b2b
1.3.4:p9
adobecommerce_b2b
1.3.5:p1
adobecommerce_b2b
1.3.5:p2
adobecommerce_b2b
1.3.5:p3
adobecommerce_b2b
1.3.5:p4
adobecommerce_b2b
1.3.5:p5
adobecommerce_b2b
1.3.5:p6
adobecommerce_b2b
1.3.5:p7
adobecommerce_b2b
1.4.2:p1
adobecommerce_b2b
1.4.2:p2
𝑥
= Vulnerable software versions