9.1

CVE-2026-48358

Medienbericht

Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)

Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeCommerce Version2.4.4 Update-
AdobeCommerce Version2.4.4 Updatep1
AdobeCommerce Version2.4.4 Updatep10
AdobeCommerce Version2.4.4 Updatep11
AdobeCommerce Version2.4.4 Updatep12
AdobeCommerce Version2.4.4 Updatep13
AdobeCommerce Version2.4.4 Updatep14
AdobeCommerce Version2.4.4 Updatep15
AdobeCommerce Version2.4.4 Updatep16
AdobeCommerce Version2.4.4 Updatep17
AdobeCommerce Version2.4.4 Updatep18
AdobeCommerce Version2.4.4 Updatep2
AdobeCommerce Version2.4.4 Updatep3
AdobeCommerce Version2.4.4 Updatep4
AdobeCommerce Version2.4.4 Updatep5
AdobeCommerce Version2.4.4 Updatep6
AdobeCommerce Version2.4.4 Updatep7
AdobeCommerce Version2.4.4 Updatep8
AdobeCommerce Version2.4.4 Updatep9
AdobeCommerce Version2.4.5 Update-
AdobeCommerce Version2.4.5 Updatep1
AdobeCommerce Version2.4.5 Updatep10
AdobeCommerce Version2.4.5 Updatep11
AdobeCommerce Version2.4.5 Updatep12
AdobeCommerce Version2.4.5 Updatep13
AdobeCommerce Version2.4.5 Updatep14
AdobeCommerce Version2.4.5 Updatep15
AdobeCommerce Version2.4.5 Updatep16
AdobeCommerce Version2.4.5 Updatep17
AdobeCommerce Version2.4.5 Updatep2
AdobeCommerce Version2.4.5 Updatep3
AdobeCommerce Version2.4.5 Updatep4
AdobeCommerce Version2.4.5 Updatep5
AdobeCommerce Version2.4.5 Updatep6
AdobeCommerce Version2.4.5 Updatep7
AdobeCommerce Version2.4.5 Updatep8
AdobeCommerce Version2.4.5 Updatep9
AdobeCommerce Version2.4.6 Update-
AdobeCommerce Version2.4.6 Updatep1
AdobeCommerce Version2.4.6 Updatep10
AdobeCommerce Version2.4.6 Updatep11
AdobeCommerce Version2.4.6 Updatep12
AdobeCommerce Version2.4.6 Updatep13
AdobeCommerce Version2.4.6 Updatep14
AdobeCommerce Version2.4.6 Updatep15
AdobeCommerce Version2.4.6 Updatep2
AdobeCommerce Version2.4.6 Updatep3
AdobeCommerce Version2.4.6 Updatep4
AdobeCommerce Version2.4.6 Updatep5
AdobeCommerce Version2.4.6 Updatep6
AdobeCommerce Version2.4.6 Updatep7
AdobeCommerce Version2.4.6 Updatep8
AdobeCommerce Version2.4.6 Updatep9
AdobeCommerce Version2.4.7 Update-
AdobeCommerce Version2.4.7 Updateb1
AdobeCommerce Version2.4.7 Updateb2
AdobeCommerce Version2.4.7 Updatebeta3
AdobeCommerce Version2.4.7 Updatep1
AdobeCommerce Version2.4.7 Updatep10
AdobeCommerce Version2.4.7 Updatep2
AdobeCommerce Version2.4.7 Updatep3
AdobeCommerce Version2.4.7 Updatep4
AdobeCommerce Version2.4.7 Updatep5
AdobeCommerce Version2.4.7 Updatep6
AdobeCommerce Version2.4.7 Updatep7
AdobeCommerce Version2.4.7 Updatep8
AdobeCommerce Version2.4.7 Updatep9
AdobeCommerce Version2.4.8 Update-
AdobeCommerce Version2.4.8 Updatebeta1
AdobeCommerce Version2.4.8 Updatebeta2
AdobeCommerce Version2.4.8 Updatep1
AdobeCommerce Version2.4.8 Updatep2
AdobeCommerce Version2.4.8 Updatep3
AdobeCommerce Version2.4.8 Updatep4
AdobeCommerce Version2.4.8 Updatep5
AdobeCommerce Version2.4.9 Update-
AdobeCommerce B2b Version1.3.3 Update-
AdobeCommerce B2b Version1.3.3 Updatep1
AdobeCommerce B2b Version1.3.3 Updatep10
AdobeCommerce B2b Version1.3.3 Updatep11
AdobeCommerce B2b Version1.3.3 Updatep12
AdobeCommerce B2b Version1.3.3 Updatep13
AdobeCommerce B2b Version1.3.3 Updatep14
AdobeCommerce B2b Version1.3.3 Updatep15
AdobeCommerce B2b Version1.3.3 Updatep16
AdobeCommerce B2b Version1.3.3 Updatep17
AdobeCommerce B2b Version1.3.3 Updatep18
AdobeCommerce B2b Version1.3.3 Updatep2
AdobeCommerce B2b Version1.3.3 Updatep3
AdobeCommerce B2b Version1.3.3 Updatep4
AdobeCommerce B2b Version1.3.3 Updatep5
AdobeCommerce B2b Version1.3.3 Updatep6
AdobeCommerce B2b Version1.3.3 Updatep7
AdobeCommerce B2b Version1.3.3 Updatep8
AdobeCommerce B2b Version1.3.3 Updatep9
AdobeCommerce B2b Version1.3.4 Update-
AdobeCommerce B2b Version1.3.4 Updatep1
AdobeCommerce B2b Version1.3.4 Updatep10
AdobeCommerce B2b Version1.3.4 Updatep11
AdobeCommerce B2b Version1.3.4 Updatep12
AdobeCommerce B2b Version1.3.4 Updatep13
AdobeCommerce B2b Version1.3.4 Updatep14
AdobeCommerce B2b Version1.3.4 Updatep15
AdobeCommerce B2b Version1.3.4 Updatep16
AdobeCommerce B2b Version1.3.4 Updatep17
AdobeCommerce B2b Version1.3.4 Updatep2
AdobeCommerce B2b Version1.3.4 Updatep3
AdobeCommerce B2b Version1.3.4 Updatep4
AdobeCommerce B2b Version1.3.4 Updatep5
AdobeCommerce B2b Version1.3.4 Updatep6
AdobeCommerce B2b Version1.3.4 Updatep7
AdobeCommerce B2b Version1.3.4 Updatep8
AdobeCommerce B2b Version1.3.4 Updatep9
AdobeCommerce B2b Version1.4.2 Update-
AdobeCommerce B2b Version1.4.2 Updatep1
AdobeCommerce B2b Version1.4.2 Updatep10
AdobeCommerce B2b Version1.4.2 Updatep2
AdobeCommerce B2b Version1.4.2 Updatep3
AdobeCommerce B2b Version1.4.2 Updatep4
AdobeCommerce B2b Version1.4.2 Updatep5
AdobeCommerce B2b Version1.4.2 Updatep6
AdobeCommerce B2b Version1.4.2 Updatep7
AdobeCommerce B2b Version1.4.2 Updatep8
AdobeCommerce B2b Version1.4.2 Updatep9
AdobeCommerce B2b Version1.5.2 Update-
AdobeCommerce B2b Version1.5.2 Updatep1
AdobeCommerce B2b Version1.5.2 Updatep2
AdobeCommerce B2b Version1.5.2 Updatep3
AdobeCommerce B2b Version1.5.2 Updatep4
AdobeCommerce B2b Version1.5.2 Updatep5
AdobeCommerce B2b Version1.5.3 Update-
AdobeMagento Version2.4.6 Update- SwEditionopen_source
AdobeMagento Version2.4.6 Updatep1 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep10 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep11 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep12 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep13 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep14 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep15 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep2 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep3 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep4 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep5 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep6 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep7 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep8 SwEditionopen_source
AdobeMagento Version2.4.6 Updatep9 SwEditionopen_source
AdobeMagento Version2.4.7 Update- SwEditionopen_source
AdobeMagento Version2.4.7 Updateb1 SwEditionopen_source
AdobeMagento Version2.4.7 Updateb2 SwEditionopen_source
AdobeMagento Version2.4.7 Updatebeta3 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep1 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep10 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep2 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep3 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep4 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep5 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep6 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep7 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep8 SwEditionopen_source
AdobeMagento Version2.4.7 Updatep9 SwEditionopen_source
AdobeMagento Version2.4.8 Update- SwEditionopen_source
AdobeMagento Version2.4.8 Updatebeta1 SwEditionopen_source
AdobeMagento Version2.4.8 Updatebeta2 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep1 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep2 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep3 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep4 SwEditionopen_source
AdobeMagento Version2.4.8 Updatep5 SwEditionopen_source
AdobeMagento Version2.4.9 Update- SwEditionopen_source
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.49% 0.714
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.1 2.3 6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Adobe 9.1 2.3 6
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE-116 Improper Encoding or Escaping of Output

The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
15.07.2026 16:09
https://helpx.adobe.com/security/products/magento/apsb26-73.html
Vendor Advisory