Magento

This hub aggregates every CVE we track for Magento, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Magento.

• CVE-2026-76200Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)9.3Sep 8, 2026
• CVE-2026-76201Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)9.3Sep 8, 2026
• CVE-2026-77109Adobe Commerce | Incorrect Authorization (CWE-863)8.6Sep 8, 2026
• CVE-2026-77110Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.6Sep 8, 2026
• CVE-2026-77108Adobe Commerce | Incorrect Authorization (CWE-863)7.5Sep 8, 2026
• CVE-2026-76202Adobe Commerce | Incorrect Authorization (CWE-863)8.2Sep 8, 2026
• CVE-2026-77774Adobe Commerce | Incorrect Authorization (CWE-863)8.6Sep 8, 2026
• CVE-2026-77111Adobe Commerce | Incorrect Authorization (CWE-863)8.7Sep 8, 2026
• CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)KEV10.0Sep 7, 2026
• CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863)9.1Aug 11, 2026
• CVE-2026-47984Adobe Commerce | Incorrect Authorization (CWE-863)8.2Jul 14, 2026
• CVE-2026-47997Adobe Commerce | Incorrect Authorization (CWE-863)5.9Jul 14, 2026
• CVE-2026-47988Adobe Commerce | Incorrect Authorization (CWE-863)8.6Jul 14, 2026
• CVE-2026-47999Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)4.8Jul 14, 2026
• CVE-2026-48358Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)9.1Jul 14, 2026