<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>VulnFeed.org: Adobe Commerce and Magento</title><link>https://vulnfeed.org/</link><description>Every disclosure, as it lands. Critical-only feed available.</description><language>en</language><atom:link href="https://vulnfeed.org/feed/product/adobe-commerce-and-magento.xml" rel="self" type="application/rss+xml"/><item><title>CVE-2026-48356: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-48356/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-48356/</guid><pubDate>Tue, 27 Oct 2026 00:00:00 +0000</pubDate><description>Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim&apos;s account or session.</description></item><item><title>CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-71362/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-71362/</guid><pubDate>Thu, 24 Sep 2026 00:00:00 +0000</pubDate><description>Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.</description></item><item><title>CVE-2026-75650: Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability</title><link>https://vulnfeed.org/cve/CVE-2026-75650/</link><guid isPermaLink="true">https://vulnfeed.org/cve/CVE-2026-75650/</guid><pubDate>Tue, 08 Sep 2026 00:00:00 +0000</pubDate><description>Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.</description></item></channel></rss>
