CVE-2026-71362

Adobe Commerce | Incorrect Authorization (CWE-863)

CVSS 9.1 critical · Adobe Adobe Commerce · published 2026-08-11

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.

NVD · CVE.org

Coverage 1 source

1. 2026-09-24 CISA Cybersecurity Advisories high CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA added two vulnerabilities to its Known Exploited Vulnerabilities Catalog: CVE-2026-5430 and CVE-2026-71362.

Mentioned with

CVE-2026-5430

Also covered

• CVE-2026-86950 Apple iOS and iPadOS CVSS 8.8 · 1 article · 2026-09-29
• CVE-2023-6548 Cloud Software Group NetScaler ADC CVSS 5.5 · 1 article · 2026-09-28
• CVE-2023-25608 Fortinet FortiAP-W2 CVSS 5.2 · 1 article · 2026-09-28
• CVE-2026-88772 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVSS 9.5 · 3 articles · 2026-09-28
• CVE-2026-88771 A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVSS 9.5 · 3 articles · 2026-09-28