CVE-2025-54265

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p15 and earlier Adobe Commerce version 2.4.5-p14 Adobe Commerce version 2.4.6-p12 Adobe Commerce version 2.4.7-p7 Adobe Commerce version 2.4.8-p2 Adobe Commerce version 2.4.9-alpha2

Description An Incorrect Authorization issue exists in Adobe Commerce. An attacker could bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.

Recommendations Update Adobe Commerce to a version later than 2.4.4-p15. Update Adobe Commerce to a version later than 2.4.5-p14. Update Adobe Commerce to a version later than 2.4.6-p12. Update Adobe Commerce to a version later than 2.4.7-p7. Update Adobe Commerce to a version later than 2.4.8-p2. Update Adobe Commerce to a version later than 2.4.9-alpha2.