Vulnerability Details CVE-2026-21295
Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.1%
CVSS Severity
CVSS v3 Score 3.1
Products affected by CVE-2026-21295
-
cpe:2.3:a:adobe:commerce:-
-
cpe:2.3:a:adobe:commerce:2.3.0
-
cpe:2.3:a:adobe:commerce:2.3.2
-
cpe:2.3:a:adobe:commerce:2.3.3
-
cpe:2.3:a:adobe:commerce:2.3.4
-
cpe:2.3:a:adobe:commerce:2.3.5
-
cpe:2.3:a:adobe:commerce:2.3.6
-
cpe:2.3:a:adobe:commerce:2.3.7
-
cpe:2.3:a:adobe:commerce:2.4.0
-
cpe:2.3:a:adobe:commerce:2.4.1
-
cpe:2.3:a:adobe:commerce:2.4.2
-
cpe:2.3:a:adobe:commerce:2.4.3
-
cpe:2.3:a:adobe:commerce:2.4.4
-
cpe:2.3:a:adobe:commerce:2.4.5
-
cpe:2.3:a:adobe:commerce:2.4.6
-
cpe:2.3:a:adobe:commerce:2.4.7
-
cpe:2.3:a:adobe:commerce:2.4.8
-
cpe:2.3:a:adobe:commerce:2.4.9
-
cpe:2.3:a:adobe:commerce_b2b:1.2.0
-
cpe:2.3:a:adobe:commerce_b2b:1.3.0
-
cpe:2.3:a:adobe:commerce_b2b:1.3.1
-
cpe:2.3:a:adobe:commerce_b2b:1.3.2
-
cpe:2.3:a:adobe:commerce_b2b:1.3.3
-
cpe:2.3:a:adobe:commerce_b2b:1.3.4
-
cpe:2.3:a:adobe:commerce_b2b:1.3.5
-
cpe:2.3:a:adobe:commerce_b2b:1.4.2
-
cpe:2.3:a:adobe:commerce_b2b:1.5.2
-
cpe:2.3:a:adobe:commerce_b2b:1.5.3
-
cpe:2.3:a:adobe:magento:-
-
cpe:2.3:a:adobe:magento:2.3.0
-
cpe:2.3:a:adobe:magento:2.3.1
-
cpe:2.3:a:adobe:magento:2.3.2
-
cpe:2.3:a:adobe:magento:2.3.3
-
cpe:2.3:a:adobe:magento:2.3.4
-
cpe:2.3:a:adobe:magento:2.3.5
-
cpe:2.3:a:adobe:magento:2.3.6
-
cpe:2.3:a:adobe:magento:2.3.7
-
cpe:2.3:a:adobe:magento:2.4.0
-
cpe:2.3:a:adobe:magento:2.4.1
-
cpe:2.3:a:adobe:magento:2.4.2
-
cpe:2.3:a:adobe:magento:2.4.3
-
cpe:2.3:a:adobe:magento:2.4.4
-
cpe:2.3:a:adobe:magento:2.4.5
-
cpe:2.3:a:adobe:magento:2.4.6
-
cpe:2.3:a:adobe:magento:2.4.7
-
cpe:2.3:a:adobe:magento:2.4.8
-
cpe:2.3:a:adobe:magento:2.4.9