Commerce

This hub aggregates every CVE we track for Commerce, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Commerce.

• CVE-2026-55795Craft Commerce: Coupon Code Brute-Force via Rate Limit BypassSep 14, 2026
• CVE-2026-76200Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)9.3Sep 8, 2026
• CVE-2026-76201Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)9.3Sep 8, 2026
• CVE-2026-77109Adobe Commerce | Incorrect Authorization (CWE-863)8.6Sep 8, 2026
• CVE-2026-77110Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.6Sep 8, 2026
• CVE-2026-77108Adobe Commerce | Incorrect Authorization (CWE-863)7.5Sep 8, 2026
• CVE-2026-76202Adobe Commerce | Incorrect Authorization (CWE-863)8.2Sep 8, 2026
• CVE-2026-77774Adobe Commerce | Incorrect Authorization (CWE-863)8.6Sep 8, 2026
• CVE-2026-77111Adobe Commerce | Incorrect Authorization (CWE-863)8.7Sep 8, 2026
• CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)KEV10.0Sep 7, 2026
• CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863)9.1Aug 11, 2026
• CVE-2026-21824A privilege escalation vulnerability affects HCL Commerce8.8Jul 20, 2026
• CVE-2026-47984Adobe Commerce | Incorrect Authorization (CWE-863)8.2Jul 14, 2026
• CVE-2026-47997Adobe Commerce | Incorrect Authorization (CWE-863)5.9Jul 14, 2026
• CVE-2026-47988Adobe Commerce | Incorrect Authorization (CWE-863)8.6Jul 14, 2026