CVE-2026-48000

Name of the Vulnerable Software and Affected Versions Magento Open Source (affected versions not specified) Adobe Commerce (affected versions not specified) Adobe Commerce B2B (affected versions not specified)

Description An Improper Redirect (Open Redirect) issue exists where the software fails to properly validate destination URLs. A remote attacker can construct a malicious URL that redirects a user to an external site under the attacker's control. This can lead to a security feature bypass, potentially enabling credential theft and account takeover. Successful exploitation requires user interaction, as the victim must click the malicious link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.