Skip to content
NewA calmer, faster ZeroHour
Exploit / PoChighExploited in the wild

CISA adds exploited Adobe Commerce and Magento upload flaw to KEV

Original title: CISA KEV: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability — Adobe Commerce and Magento (CVE-2026-48356)

CISA Known Exploited Vulnerabilities ()1 min read1 · 1 read
Read at cisa.gov
Part of a story covered by 11 sourcesMagento loader campaign still on 953 stores as CISA lists PolyShellMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

CVE-2026-48356 can run code as the current user; federal agencies must mitigate by November 10.

CISA added CVE-2026-48356, an unrestricted upload of a file with a dangerous type in Adobe Commerce and Magento, to the Known Exploited Vulnerabilities catalog. Successful use could execute arbitrary code in the current user's context and potentially elevate access or control an account or session. Agencies must apply vendor mitigations under BOD 26-04 or stop using the product if fixes are unavailable. The due date is November 10, 2026.

Unconfirmed: CISA lists known ransomware campaign use as unknown.

Key facts
  • The catalog entry covers Adobe Commerce and Magento.
  • Required action includes CISA forensics triage requirements.
  • Known ransomware campaign use is listed as unknown.
  • Stakeholders must judge each asset's internet exposure under BOD 26-04.
Security assessment · AI, from the articleExploited in the wild

Impact: Arbitrary code execution as the current user

ProductAffected
Adobe Commerce and Magento—
What to do
  1. 1.Apply vendor mitigations in line with CISA BOD 26-04 by November 10, 2026.
  2. 2.Discontinue use if mitigations are unavailable.
Analyze CVE-2026-48356 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-48356
ATT&CK
T1190 Exploit Public-Facing Application
Tags
adobe-commercemagentokevfile-uploadcisa
Vendors
Adobe
Products
Adobe CommerceMagento
Organizations
CISA

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-48356
Unrestricted dangerous file upload in Adobe Commerce and Magento
9.345%KEV
KEV

From the original article

1 min read at cisa.gov

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.

CISA Known Exploited Vulnerabilities

cisa.gov

Read the full article at CISA Known Exploited Vulnerabilities

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.