60
55
60
60
55
60
55
Adobe patches critical Magento account takeover (APSB26-92)
Adobe ships isolated patches (APSB26-92) for Adobe Commerce and Magento Open Source fixing seven flaws, five Critical including account takeover CVE-2026-71362.
Adobe released isolated security patches under APSB26-92 for Adobe Commerce and Magento Open Source addressing seven vulnerabilities, five of them rated Critical. The critical set includes CVE-2026-71362, which Sansec characterizes as enabling account takeover. Merchots running Magento-based stores are urged to apply the patches.
55
Microsoft, Adobe, SAP deliver critical fixes for September 2025 Patch Tuesday
60
60
60
60
60
Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High
60
Adobe Patch Tuesday fixed critical vulnerabilities in Magento, Acrobat and Reader
60
55
Magento patches critical code execution vulnerabilities, upgrade ASAP!
60
55
55
60
60
47
Magento, Visual Studio Code users: You need to patch!
60
Magento Update Released to Fix Critical Flaws Affecting E
60
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Adobe patches seven flaws in ColdFusion, Commerce, and Campaign Classic, including actively exploited CVE-2026-71362 enabling customer account takeover.
Adobe issued Priority 1 updates fixing CVSS 10.0 flaws in ColdFusion (CVE-2026-48362, OS command injection) and Campaign Classic (CVE-2026-71398, CVE-2026-27302, incorrect authorization), plus CVE-2026-71362 (CVSS 9.1) in Adobe Commerce and Magento Open Source. Sansec reports threat actors are actively exploiting CVE-2026-71362 to switch customer sessions to other accounts and access private customer data. Adobe-hosted Campaign Classic instances are already remediated, while on-premise deployments are urged to patch within 72 hours. ColdFusion fixes ship in versions 2025.0.12 and 2023.0.23, and Campaign Classic fixes in v7 7.4.4 build 9400.
75
60
55
60
55
42
30
60
60
42
55
47
55
55
60
55