Type Vulnerability
CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Next step: Confirm whether Google Brotli is in your estate.
Adobe Commerce and Magento Unrestricted File Upload Vulnerability
CVE-2026-48356
What this means
This is rated critical severity (9.3 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Adobe Commerce is in your estate, and treat that as the priority.
Full vendor description
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Scoring and exploitation
9.3/ 10
CVSS 3.1 base scoreCritical
Exploitable over the network without any account, but only if a user takes an action, such as opening a file or link. High impact on confidentiality and integrity, and it can reach beyond the vulnerable system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionRequiredUI:R
ScopeChangedS:C
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityNoneA:N
- Elevated attack likelihood (~47.5% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Not reported
- Listed product
- Adobe Commerce and Magento
Weaknesses
CWE-434
Affected products ()
- Adobe Commerce
Show the raw CPE strings (40)
- cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*
Showing 25 of 40 matches from .
References
4 links from the CVE record, grouped by site; the vendor's advisory comes first.
helpx.adobe.com1 linkVendor advisory
- apsb26-73.html (opens in a new tab)Vendor Advisory
sansec.io2 links
- magento-cms-block-loader-deepveindrilling (opens in a new tab)Third Party Advisory
- polyshell-mass-attack-wave (opens in a new tab)Third Party Advisory
cisa.gov1 link
- known-exploited-vulnerabilities-catalog (opens in a new tab)US Government Resource
Related feed events
- Type Vulnerability
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially… Known-exploited…
Next step: Confirm whether Adobe Commerce is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.