PT-2026-58778 · Adobe · Commerce B2B+2

CVE-2026-48001

·

Published

2026-07-14

·

Updated

2026-07-14

CVSS v3.1

3.7

Low

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Magento Open Source (affected versions not specified) Adobe Commerce (affected versions not specified) Adobe Commerce B2B (affected versions not specified)
Description An information exposure issue exists where insufficient protection of service data may lead to the limited disclosure of sensitive information. A remote attacker could exploit this to bypass security restrictions. Exploitation does not require user interaction, although it depends on conditions beyond the attacker's control.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10048
CVE-2026-48001

Affected Products

Commerce
Commerce B2B
Magento Open Source