Attackers Target Critical Vulnerability in Adobe Commerce and Magento

Attackers Target Critical Vulnerability in Adobe Commerce and Magento

In September, Adobe released updates for Commerce and Magento that close a critical vulnerability.

Admins should install them quickly, as attacks on the vulnerabilities are now underway. Adobe has updated and supplemented the security advisory for the vulnerability, stating that the company is aware of internet attacks targeting the flaw.

The company refers to the "Common Weakness Enumeration" classification of the problems, which is an Improper Input Validation (CWE-20) that leads to the bypass of security functions (CVE-2025-54236, CVSS 9.1, Risk "critical").

Adobe is aware of internet attacks targeting the flaw.

Author's summary: Adobe updates fix critical vulnerability.

more

heise online heise online — 2025-10-24

More News