6.1

CVE-2026-48000

Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeCommerce Version2.4.4 Update-
AdobeCommerce Version2.4.4 Updatep1
AdobeCommerce Version2.4.4 Updatep10
AdobeCommerce Version2.4.4 Updatep11
AdobeCommerce Version2.4.4 Updatep12
AdobeCommerce Version2.4.4 Updatep13
AdobeCommerce Version2.4.4 Updatep14
AdobeCommerce Version2.4.4 Updatep15
AdobeCommerce Version2.4.4 Updatep16
AdobeCommerce Version2.4.4 Updatep17
AdobeCommerce Version2.4.4 Updatep18
AdobeCommerce Version2.4.4 Updatep2
AdobeCommerce Version2.4.4 Updatep3
AdobeCommerce Version2.4.4 Updatep4
AdobeCommerce Version2.4.4 Updatep5
AdobeCommerce Version2.4.4 Updatep6
AdobeCommerce Version2.4.4 Updatep7
AdobeCommerce Version2.4.4 Updatep8
AdobeCommerce Version2.4.4 Updatep9
AdobeCommerce Version2.4.5 Update-
AdobeCommerce Version2.4.5 Updatep1
AdobeCommerce Version2.4.5 Updatep10
AdobeCommerce Version2.4.5 Updatep11
AdobeCommerce Version2.4.5 Updatep12
AdobeCommerce Version2.4.5 Updatep13
AdobeCommerce Version2.4.5 Updatep14
AdobeCommerce Version2.4.5 Updatep15
AdobeCommerce Version2.4.5 Updatep16
AdobeCommerce Version2.4.5 Updatep17
AdobeCommerce Version2.4.5 Updatep2
AdobeCommerce Version2.4.5 Updatep3
AdobeCommerce Version2.4.5 Updatep4
AdobeCommerce Version2.4.5 Updatep5
AdobeCommerce Version2.4.5 Updatep6
AdobeCommerce Version2.4.5 Updatep7
AdobeCommerce Version2.4.5 Updatep8
AdobeCommerce Version2.4.5 Updatep9
AdobeCommerce Version2.4.6 Update-
AdobeCommerce Version2.4.6 Updatep1
AdobeCommerce Version2.4.6 Updatep10
AdobeCommerce Version2.4.6 Updatep11
AdobeCommerce Version2.4.6 Updatep12
AdobeCommerce Version2.4.6 Updatep13
AdobeCommerce Version2.4.6 Updatep14
AdobeCommerce Version2.4.6 Updatep15
AdobeCommerce Version2.4.6 Updatep2
AdobeCommerce Version2.4.6 Updatep3
AdobeCommerce Version2.4.6 Updatep4
AdobeCommerce Version2.4.6 Updatep5
AdobeCommerce Version2.4.6 Updatep6
AdobeCommerce Version2.4.6 Updatep7
AdobeCommerce Version2.4.6 Updatep8
AdobeCommerce Version2.4.6 Updatep9
AdobeCommerce Version2.4.7 Update-
AdobeCommerce Version2.4.7 Updateb1
AdobeCommerce Version2.4.7 Updateb2
AdobeCommerce Version2.4.7 Updatebeta3
AdobeCommerce Version2.4.7 Updatep1
AdobeCommerce Version2.4.7 Updatep10
AdobeCommerce Version2.4.7 Updatep2
AdobeCommerce Version2.4.7 Updatep3
AdobeCommerce Version2.4.7 Updatep4
AdobeCommerce Version2.4.7 Updatep5
AdobeCommerce Version2.4.7 Updatep6
AdobeCommerce Version2.4.7 Updatep7
AdobeCommerce Version2.4.7 Updatep8
AdobeCommerce Version2.4.7 Updatep9
AdobeCommerce Version2.4.8 Update-
AdobeCommerce Version2.4.8 Updatebeta1
AdobeCommerce Version2.4.8 Updatebeta2
AdobeCommerce Version2.4.8 Updatep1
AdobeCommerce Version2.4.8 Updatep2
AdobeCommerce Version2.4.8 Updatep3
AdobeCommerce Version2.4.8 Updatep4
AdobeCommerce Version2.4.8 Updatep5
AdobeCommerce Version2.4.9 Update-
AdobeCommerce B2b Version1.3.3 Update-
AdobeCommerce B2b Version1.3.3 Updatep1
AdobeCommerce B2b Version1.3.3 Updatep10
AdobeCommerce B2b Version1.3.3 Updatep11
AdobeCommerce B2b Version1.3.3 Updatep12
AdobeCommerce B2b Version1.3.3 Updatep13
AdobeCommerce B2b Version1.3.3 Updatep14
AdobeCommerce B2b Version1.3.3 Updatep15
AdobeCommerce B2b Version1.3.3 Updatep16
AdobeCommerce B2b Version1.3.3 Updatep17
AdobeCommerce B2b Version1.3.3 Updatep18
AdobeCommerce B2b Version1.3.3 Updatep2
AdobeCommerce B2b Version1.3.3 Updatep3
AdobeCommerce B2b Version1.3.3 Updatep4
AdobeCommerce B2b Version1.3.3 Updatep5
AdobeCommerce B2b Version1.3.3 Updatep6
AdobeCommerce B2b Version1.3.3 Updatep7
AdobeCommerce B2b Version1.3.3 Updatep8
AdobeCommerce B2b Version1.3.3 Updatep9
AdobeCommerce B2b Version1.3.4 Update-
AdobeCommerce B2b Version1.3.4 Updatep1
AdobeCommerce B2b Version1.3.4 Updatep10
AdobeCommerce B2b Version1.3.4 Updatep11
AdobeCommerce B2b Version1.3.4 Updatep12
AdobeCommerce B2b Version1.3.4 Updatep13
AdobeCommerce B2b Version1.3.4 Updatep14
AdobeCommerce B2b Version1.3.4 Updatep15
AdobeCommerce B2b Version1.3.4 Updatep16
AdobeCommerce B2b Version1.3.4 Updatep17
AdobeCommerce B2b Version1.3.4 Updatep2
AdobeCommerce B2b Version1.3.4 Updatep3
AdobeCommerce B2b Version1.3.4 Updatep4
AdobeCommerce B2b Version1.3.4 Updatep5
AdobeCommerce B2b Version1.3.4 Updatep6
AdobeCommerce B2b Version1.3.4 Updatep7
AdobeCommerce B2b Version1.3.4 Updatep8
AdobeCommerce B2b Version1.3.4 Updatep9
AdobeCommerce B2b Version1.4.2 Update-
AdobeCommerce B2b Version1.4.2 Updatep1
AdobeCommerce B2b Version1.4.2 Updatep10
AdobeCommerce B2b Version1.4.2 Updatep2
AdobeCommerce B2b Version1.4.2 Updatep3
AdobeCommerce B2b Version1.4.2 Updatep4
AdobeCommerce B2b Version1.4.2 Updatep5
AdobeCommerce B2b Version1.4.2 Updatep6
AdobeCommerce B2b Version1.4.2 Updatep7
AdobeCommerce B2b Version1.4.2 Updatep8
AdobeCommerce B2b Version1.4.2 Updatep9
AdobeCommerce B2b Version1.5.2 Update-
AdobeCommerce B2b Version1.5.2 Updatep1
AdobeCommerce B2b Version1.5.2 Updatep2
AdobeCommerce B2b Version1.5.2 Updatep3
AdobeCommerce B2b Version1.5.2 Updatep4
AdobeCommerce B2b Version1.5.2 Updatep5
AdobeCommerce B2b Version1.5.3 Update-
AdobeMagento Version2.4.6 Update- SwEditionopen_source
AdobeMagento Version2.4.6 Updatep1 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep10 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep11 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep12 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep13 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep14 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep15 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep2 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep3 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep4 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep5 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep6 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep7 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep8 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep9 SwEditionopen_source
AdobeMagento Version2.4.7 Update- SwEditionopen_source
AdobeMagento Version2.4.7 Updateb1 SwEditionopen_source
AdobeMagento Version2.4.7 Updateb2 SwEditionopen_source
AdobeMagento Version2.4.7 Updatebeta3 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep1 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep10 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep2 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep3 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep4 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep5 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep6 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep7 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep8 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep9 SwEditionopen_source
AdobeMagento Version2.4.8 Update- SwEditionopen_source
AdobeMagento Version2.4.8 Updatebeta1 SwEditionopen_source
AdobeMagento Version2.4.8 Updatebeta2 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep1 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep2 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep3 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep4 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep5 SwEditionopen_source
AdobeMagento Version2.4.9 Update- SwEditionopen_source
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.275
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://helpx.adobe.com/security/products/magento/apsb26-73.html
Vendor Advisory