Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability
Adobe · Commerce and Magento
Date added (CISA)
2026-09-08
Remediation due
2026-09-11
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Adobe Commerce and Magento Open Source contain an improper neutralization of special elements used in a template engine vulnerability that could allow an attacker to execute arbitrary code.