Adobe Commerce B2B

Name: Adobe Commerce B2B
Brand: Adobe

productNL

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical14high2medium0low

updated 2026-10-27

vulnerabilities (33)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-71362US	—OT critical	90.5% (100th)	KEV	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-75650US	critical10.0OT critical	3.95% (90th)	KEV	no fix	2026-09-07	≤ vers:unknown/*
CVE-2026-103849US	critical10.0	1.17% (67th)	Exploit	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-34648US	—	21.4% (98th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-34650US	—	15.1% (97th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-34649US	—	13.6% (96th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-77110US	high7.6	1.09% (65th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-100133US	critical9.3	1.05% (64th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-92922US	high8.1	0.90% (59th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-91013US	critical9.3	0.89% (59th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-92464US	critical9.1	0.87% (59th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-92911US	high8.7	0.86% (58th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-95631US	high8.7	0.86% (58th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-77111US	high8.7OT elevated	0.84% (58th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-77774US	high8.6OT elevated	0.83% (57th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-48416US	—OT elevated	0.83% (57th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-77108US	high7.5OT elevated	0.82% (57th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-92909US	critical9.8OT elevated	0.79% (56th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-76201US	critical9.3	0.74% (55th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-76200US	critical9.3	0.74% (55th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-48413US	—	0.70% (53rd)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-77109US	high8.6OT elevated	0.69% (53rd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-76202US	high8.2OT elevated	0.67% (52nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-34647US	—	0.65% (51st)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-48411US	medium4.9OT elevated	0.63% (50th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-92908US	high8.3OT elevated	0.60% (49th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-34645US	—OT elevated	0.56% (46th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-48415US	high8.3OT elevated	0.56% (46th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-48412US	high7.2OT elevated	0.56% (46th)	—	no fix	2026-08-11	≤ vers:unknown/*
CVE-2026-95630US	medium4.3	0.47% (41st)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-92910US	high7.2OT elevated	0.41% (35th)	—	no fix	2026-10-13	≤ vers:unknown/*
CVE-2026-34646US	—OT elevated	0.41% (35th)	—	no fix	2026-05-12	≤ vers:unknown/*
CVE-2026-48414US	high8.7	0.33% (26th)	—	no fix	2026-08-11	≤ vers:unknown/*

weaknesses (7)

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization15 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-1336Improper Neutralization of Special Elements Used in a Template Engine2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-918Server-Side Request Forgery (SSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan