Security Advisory

Adobe Product Security Update Advisory (CVE-2026-71362)

  • Sep 28 2026
Adobe Product Security Update Advisory (CVE-2026-71362)

Overview

Security updates have been released to address vulnerabilities found in Adobe products. These updates apply to Adobe Commerce, Adobe Commerce B2B, and Magento Open Source.

Resolved Vulnerabilities

  • CVE-2026-71362: An incorrect authorization vulnerability in Adobe Commerce and Magento Open Source. This vulnerability could allow an attacker to gain access to sensitive resources.

Affected Products

  • Adobe Commerce 2.4.4-2026-Jul and earlier.
  • Adobe Commerce 2.4.5-2026-Jul and earlier.
  • Adobe Commerce 2.4.6-2026-Jul and earlier.
  • Adobe Commerce 2.4.7-2026-Jul and earlier.
  • Adobe Commerce 2.4.8-2026-Jul and earlier.
  • Adobe Commerce 2.4.9-2026-Jul and earlier.
  • Adobe Commerce B2B 1.3.3-2026-Jul or earlier.
  • Adobe Commerce B2B 1.3.4-2026-Jul or earlier.
  • Adobe Commerce B2B 1.4.2-2026-Jul or earlier.
  • Adobe Commerce B2B 1.5.2-July 2026 or earlier.
  • Adobe Commerce B2B 1.5.3-July 2026 or earlier.
  • Magento Open Source 2.4.6-July 2026 or earlier.
  • Magento Open Source 2.4.7-2026-Jul or earlier.
  • Magento Open Source 2.4.8-2026-Jul or earlier.
  • Magento Open Source 2.4.9-2026-Jul or earlier.

Patches and Recommendations

Adobe has provided patches through the latest updates. You must update to the following versions or higher, following the instructions on the reference site.

  • Adobe Commerce 2.4.4-2026-Aug or later.
  • Adobe Commerce 2.4.5-2026-Aug or later.
  • Adobe Commerce 2.4.6-2026-Aug or later.
  • Adobe Commerce 2.4.7-2026-Aug or later.
  • Adobe Commerce 2.4.8-2026-Aug or later.
  • Adobe Commerce 2.4.9-2026-Aug or later.
  • Adobe Commerce B2B 1.3.3-2026-Aug or later.
  • Adobe Commerce B2B 1.3.4-2026-Aug or later.
  • Adobe Commerce B2B 1.4.2-2026-Aug or later.
  • Adobe Commerce B2B 1.5.2-2026-Aug or later.
  • Adobe Commerce B2B 1.5.3-2026-Aug or later.
  • Magento Open Source 2.4.6-2026-Aug or later.
  • Magento Open Source 2.4.7-2026-Aug or later.
  • Magento Open Source 2.4.8-2026-Aug or later.
  • Magento Open Source 2.4.9-2026-Aug or later.

Note

You must apply the patch according to the instructions on the official reference site.

Tags:
Previous Post

Next Post