Magento Open Source

A critical security vulnerability, tracked as EUVD-2026-99212, has been disclosed in Adobe Commerce, Adobe Commerce B2B and Magento Open Source. The flaw, rated 9.8 out of 10 on the CVSS v3.1 scale, is an incorrect authorization issue that could allow attackers to execute arbitrary actions. The entry was published on October 13, 2026 and updated on October 15. Online commerce operators running these platforms are urged to review their installations and apply vendor fixes promptly.

A critical vulnerability, EUVD-2026-99216, has been published affecting Adobe Commerce, Adobe Commerce B2B and Magento Open Source. The flaw is rated 9.1 out of 10 on the CVSS v3.1 scale and stems from improper input validation, which could allow attackers to exploit e-commerce platforms running the software. Adobe was named as the vendor, with the advisory published on 13 October 2026 and updated two days later.

A new vulnerability, EUVD-2026-99213, has been published affecting Adobe Commerce, Adobe Commerce B2B and Magento Open Source. The flaw is an incorrect authorization issue rated 8.3 out of 10 on the CVSS v3.1 scale, meaning it is considered high severity. The advisory was published on 13 October 2026 and updated on 15 October. Security teams running Magento-based stores are expected to review the advisory and check whether patches are available.

A new vulnerability tracked as EUVD-2026-99220 has been published affecting Adobe Commerce, Adobe Commerce B2B and Magento Open Source, with a CVSS v3.1 score of 8.7 out of 10. The flaw stems from improper input validation, a class of bug that can often allow attackers to manipulate data or trigger further exploitation. The advisory was published on 13 October 2026 and updated on 15 October, and security teams running Magento-based stores are expected to check for patches.