Security Advisory

CVE-2026-47996

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-14 19:44:12
Last updated 2026-08-04 22:23:15
Assigner adobe
CVSS score 7.6
State PUBLISHED

Description

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed.