Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized view access of data. Exploitation of this issue does not require user interaction.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
References
History
Wed, 11 Mar 2026 03:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized view access of data. Exploitation of this issue does not require user interaction. | |
| Title | Adobe Commerce | Incorrect Authorization (CWE-863) | |
| Weaknesses | CWE-863 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: adobe
Published:
Updated: 2026-03-11T02:19:22.237Z
Reserved: 2025-12-12T22:01:18.189Z
Link: CVE-2026-21286
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-03-11T03:15:53.417
Modified: 2026-03-11T03:15:53.417
Link: CVE-2026-21286
Redhat
No data.
OpenCVE Enrichment
No data.