Adobe Commerce and Magento Improper Input Validation Vulnerability
Adobe · Commerce and Magento
Date added (CISA)
2025-10-24
Remediation due
2025-11-14
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.