← CVE Intelligence

CVE-2026-75650

Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) PUBLISHED

Description (CNA)

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Affected (CNA)

Vendor / productVersions
Adobe / Adobe Commerceaffected 0 through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug; unaffected Hotfix for CVE-2026-7565
Adobe / Adobe Commerce B2Baffected 0 through 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug; unaffected Hotfix for CVE-2026-7565
Adobe / Magento Open Sourceaffected 0 through 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug; unaffected Hotfix for CVE-2026-7565

CWE

CWE-1336

References

ADP enrichment

CISA-ADP

No English description supplied.