CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:50 UTC )
This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product adobe:magento_open_source . Show all products
27 CVEs, showing 1 to 27
CVE Severity Title Published CVE-2026-95631 High 8.7 Adobe Commerce | Improper Input Validation (CWE-20) Assigned by adobe
Oct 13, 2026 CVE-2026-103849 Critical 10.0 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) Assigned by adobe
Oct 13, 2026 CVE-2026-92910 High 7.2 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Oct 13, 2026 CVE-2026-91013 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Oct 13, 2026 CVE-2026-92464 Critical 9.1 Adobe Commerce | Improper Input Validation (CWE-20) Assigned by adobe
Oct 13, 2026 CVE-2026-95630 Medium 4.3 Adobe Commerce | Improper Input Validation (CWE-20) Assigned by adobe
Oct 13, 2026 CVE-2026-92922 High 8.1 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Oct 13, 2026 CVE-2026-92908 High 8.3 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Oct 13, 2026 CVE-2026-92909 Critical 9.8 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Oct 13, 2026 CVE-2026-100133 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Oct 13, 2026 CVE-2026-92911 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Oct 13, 2026 CVE-2026-76200 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Sep 8, 2026 CVE-2026-76201 Critical 9.3 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Sep 8, 2026 CVE-2026-77109 High 8.6 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Sep 8, 2026 CVE-2026-77110 High 7.6 Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) Assigned by adobe
Sep 8, 2026 CVE-2026-77108 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Sep 8, 2026 CVE-2026-76202 High 8.2 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Sep 8, 2026 CVE-2026-77774 High 8.6 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Sep 8, 2026 CVE-2026-77111 High 8.7 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Sep 8, 2026 CVE-2026-75650 Known exploited
Critical 10.0 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) Assigned by adobe
Sep 7, 2026 CVE-2026-48414 High 7.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Aug 11, 2026 CVE-2026-48416 High 7.5 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Aug 11, 2026 CVE-2026-48413 High 8.7 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Assigned by adobe
Aug 11, 2026 CVE-2026-48415 High 7.6 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Aug 11, 2026 CVE-2026-48412 Low 2.7 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Aug 11, 2026 CVE-2026-48411 Medium 6.5 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Aug 11, 2026 CVE-2026-71362 Known exploited
Critical 9.1 Adobe Commerce | Incorrect Authorization (CWE-863) Assigned by adobe
Aug 11, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
