CVE-2026-48001
published 2026-07-14CVE-2026-48001: Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on…
PriorityP416low3.7CVSS 3.1
AVNACHPRNUINSUCLINAN
EPSS
0.51%
42.3th percentile
Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
Affected
175 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_commerce | <= 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18 | — |
| adobe | adobe_commerce_b2b | <= 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18 | — |
| adobe | adobe_commerce_events | <= 1.20.0 | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
| adobe | commerce | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Adobe Commerce information disclosure
vuldb·2026-07-15·CVSS 3.7
CVE-2026-48001 [LOW] Adobe Commerce information disclosure
A vulnerability described as problematic has been identified in Adobe Commerce. The affected element is an unknown function. Executing a manipulation can lead to information disclosure.
This vulnerability is tracked as CVE-2026-48001. The attack can be launched remotely. No exploit exists.
GHSA
Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information.
ghsa_unreviewed·2026-07-14
CVE-2026-48001 [LOW] CWE-200 Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information.
Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published