Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-21360

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restricted path. Exploitation of this issue does not require user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.4%
CVSS Severity
CVSS v3 Score 6.8
Products affected by CVE-2026-21360
  • Adobe » Commerce » Version: N/A
    cpe:2.3:a:adobe:commerce:-
  • Adobe » Commerce » Version: 2.3.0
    cpe:2.3:a:adobe:commerce:2.3.0
  • Adobe » Commerce » Version: 2.3.2
    cpe:2.3:a:adobe:commerce:2.3.2
  • Adobe » Commerce » Version: 2.3.3
    cpe:2.3:a:adobe:commerce:2.3.3
  • Adobe » Commerce » Version: 2.3.4
    cpe:2.3:a:adobe:commerce:2.3.4
  • Adobe » Commerce » Version: 2.3.5
    cpe:2.3:a:adobe:commerce:2.3.5
  • Adobe » Commerce » Version: 2.3.6
    cpe:2.3:a:adobe:commerce:2.3.6
  • Adobe » Commerce » Version: 2.3.7
    cpe:2.3:a:adobe:commerce:2.3.7
  • Adobe » Commerce » Version: 2.4.0
    cpe:2.3:a:adobe:commerce:2.4.0
  • Adobe » Commerce » Version: 2.4.1
    cpe:2.3:a:adobe:commerce:2.4.1
  • Adobe » Commerce » Version: 2.4.2
    cpe:2.3:a:adobe:commerce:2.4.2
  • Adobe » Commerce » Version: 2.4.3
    cpe:2.3:a:adobe:commerce:2.4.3
  • Adobe » Commerce » Version: 2.4.4
    cpe:2.3:a:adobe:commerce:2.4.4
  • Adobe » Commerce » Version: 2.4.5
    cpe:2.3:a:adobe:commerce:2.4.5
  • Adobe » Commerce » Version: 2.4.6
    cpe:2.3:a:adobe:commerce:2.4.6
  • Adobe » Commerce » Version: 2.4.7
    cpe:2.3:a:adobe:commerce:2.4.7
  • Adobe » Commerce » Version: 2.4.8
    cpe:2.3:a:adobe:commerce:2.4.8
  • Adobe » Commerce » Version: 2.4.9
    cpe:2.3:a:adobe:commerce:2.4.9
  • Adobe » Commerce B2b » Version: 1.2.0
    cpe:2.3:a:adobe:commerce_b2b:1.2.0
  • Adobe » Commerce B2b » Version: 1.3.0
    cpe:2.3:a:adobe:commerce_b2b:1.3.0
  • Adobe » Commerce B2b » Version: 1.3.1
    cpe:2.3:a:adobe:commerce_b2b:1.3.1
  • Adobe » Commerce B2b » Version: 1.3.2
    cpe:2.3:a:adobe:commerce_b2b:1.3.2
  • Adobe » Commerce B2b » Version: 1.3.3
    cpe:2.3:a:adobe:commerce_b2b:1.3.3
  • Adobe » Commerce B2b » Version: 1.3.4
    cpe:2.3:a:adobe:commerce_b2b:1.3.4
  • Adobe » Commerce B2b » Version: 1.3.5
    cpe:2.3:a:adobe:commerce_b2b:1.3.5
  • Adobe » Commerce B2b » Version: 1.4.2
    cpe:2.3:a:adobe:commerce_b2b:1.4.2
  • Adobe » Commerce B2b » Version: 1.5.2
    cpe:2.3:a:adobe:commerce_b2b:1.5.2
  • Adobe » Commerce B2b » Version: 1.5.3
    cpe:2.3:a:adobe:commerce_b2b:1.5.3
  • Adobe » Magento » Version: N/A
    cpe:2.3:a:adobe:magento:-
  • Adobe » Magento » Version: 2.3.0
    cpe:2.3:a:adobe:magento:2.3.0
  • Adobe » Magento » Version: 2.3.1
    cpe:2.3:a:adobe:magento:2.3.1
  • Adobe » Magento » Version: 2.3.2
    cpe:2.3:a:adobe:magento:2.3.2
  • Adobe » Magento » Version: 2.3.3
    cpe:2.3:a:adobe:magento:2.3.3
  • Adobe » Magento » Version: 2.3.4
    cpe:2.3:a:adobe:magento:2.3.4
  • Adobe » Magento » Version: 2.3.5
    cpe:2.3:a:adobe:magento:2.3.5
  • Adobe » Magento » Version: 2.3.6
    cpe:2.3:a:adobe:magento:2.3.6
  • Adobe » Magento » Version: 2.3.7
    cpe:2.3:a:adobe:magento:2.3.7
  • Adobe » Magento » Version: 2.4.0
    cpe:2.3:a:adobe:magento:2.4.0
  • Adobe » Magento » Version: 2.4.1
    cpe:2.3:a:adobe:magento:2.4.1
  • Adobe » Magento » Version: 2.4.2
    cpe:2.3:a:adobe:magento:2.4.2
  • Adobe » Magento » Version: 2.4.3
    cpe:2.3:a:adobe:magento:2.4.3
  • Adobe » Magento » Version: 2.4.4
    cpe:2.3:a:adobe:magento:2.4.4
  • Adobe » Magento » Version: 2.4.5
    cpe:2.3:a:adobe:magento:2.4.5
  • Adobe » Magento » Version: 2.4.6
    cpe:2.3:a:adobe:magento:2.4.6
  • Adobe » Magento » Version: 2.4.7
    cpe:2.3:a:adobe:magento:2.4.7
  • Adobe » Magento » Version: 2.4.8
    cpe:2.3:a:adobe:magento:2.4.8
  • Adobe » Magento » Version: 2.4.9
    cpe:2.3:a:adobe:magento:2.4.9


Contact Us

Shodan ® - All rights reserved