CVE-2026-25488Updated Feb 4, 2026 · PUBLISHEDDescriptionNo description imported yet.Full record on cve.org →Affected packagesPackageVendor / ProductVersion rangeStatuscommercecraftcms / commerce>= 4.0.0-RC1, < 4.10.1affectedcommercecraftcms / commerce>= 5.0.0, < 5.5.2affected