CVE-2025-54236
🔥 Known Exploited (CISA KEV)CRITICAL
9.1
CVSS Severity Score
Vulnerability Description
Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.
Affected Platforms (CPE)
📦
Adobe
Commerce
= 2.4.4= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9
📦
Adobe
Commerce B2b
= 1.3.3= 1.3.4= 1.4.2= 1.5.2= 1.5.3
📦
Adobe
Magento
= 2.4.5= 2.4.6= 2.4.7= 2.4.8= 2.4.9