CVE-2026-48415

Name of the Vulnerable Software and Affected Versions Magento Open Source (affected versions not specified) Adobe Commerce (affected versions not specified) Adobe Commerce B2B (affected versions not specified)

Description An incorrect authorization flaw exists that allows a low-privileged remote attacker to bypass security mechanisms. This can result in unauthorized read and write access, potentially causing limited disruption to availability. The exploitation of this issue does not require user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.