PT-2026-58768 · Adobe · Commerce+2

CVE-2026-47984

·

Published

2026-07-14

·

Updated

2026-08-04

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Adobe Commerce (affected versions not specified) Magento Open Source (affected versions not specified) Adobe Commerce B2B (affected versions not specified)
Description An incorrect authorization issue allows a remote attacker to bypass security features. This flaw enables unauthorized read and write access without requiring any user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Incorrect Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2026-10050
CVE-2026-47984

Affected Products

Commerce
Commerce B2B
Magento Open Source