Description
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Adobe Commerce | Adobe / Adobe Commerce | >= 0, <= 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug | affected |
| Adobe Commerce | Adobe / Adobe Commerce | Hotfix for CVE-2026-7565 | unaffected |
| Adobe Commerce B2B | Adobe / Adobe Commerce B2B | >= 0, <= 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug | affected |
| Adobe Commerce B2B | Adobe / Adobe Commerce B2B | Hotfix for CVE-2026-7565 | unaffected |
| Magento Open Source | Adobe / Magento Open Source | >= 0, <= 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug | affected |
| Magento Open Source | Adobe / Magento Open Source | Hotfix for CVE-2026-7565 | unaffected |