CVE-2026-71362

Published Aug 11, 2026

Last updated 7 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-71362 is an Incorrect Authorization vulnerability identified in Adobe Commerce and Magento Open Source. This flaw allows for privilege escalation, meaning an attacker could gain elevated access to sensitive resources. Exploitation of this vulnerability does not require user interaction. Some reports indicate that this could enable an attacker to switch a customer's active account session to another, thereby gaining access to the victim's account and private data.

Description: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.
Source: psirt@adobe.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.1
Impact score: 5.2
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity: CRITICAL

Weaknesses

psirt@adobe.com: CWE-863

Hype score: Not currently trending

References