Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

Commerce and Magento

Made by Adobe. 3 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Adobe Commerce and Magento Incorrect Authorization Vulnerability (CVE-2026-71362) is being actively exploited, CISA warns

CISA added CVE-2026-71362 (Adobe Commerce and Magento ) to its Known Exploited Vulnerabilities catalog on September 24, 2026, which means there is reliable evidence of exploitation in the wild. Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.

Why it matters

CISA lists this as exploited in the wild. Unpatched Commerce and Magento systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited VulnerabilitiesSecurity pros
CriticalAct nowExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Cybersecurity Advisories · 4 sources
EnterpriseSecurity pros

Actively exploited

CVE-2026-71362CVSS 9.1

Adobe Commerce and Magento

Adobe Commerce and Magento Incorrect Authorization Vulnerability

Added Sep 24, 2026Fed. due Sep 27, 2026Coverage →
CVE-2026-75650CVSS 10.0

Adobe Commerce and Magento

Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Added Sep 8, 2026Fed. due Sep 11, 2026
CVE-2025-54236CVSS 9.1

Adobe Commerce and Magento

Adobe Commerce and Magento Improper Input Validation Vulnerability

Added Oct 24, 2025Fed. due Nov 14, 2025