Vulnerability Details CVE-2026-77111
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 41.8%
CVSS Severity
CVSS v3 Score 8.7
Products affected by CVE-2026-77111
-
cpe:2.3:a:adobe:commerce:-
-
cpe:2.3:a:adobe:commerce:2.3.0
-
cpe:2.3:a:adobe:commerce:2.3.2
-
cpe:2.3:a:adobe:commerce:2.3.3
-
cpe:2.3:a:adobe:commerce:2.3.4
-
cpe:2.3:a:adobe:commerce:2.3.5
-
cpe:2.3:a:adobe:commerce:2.3.6
-
cpe:2.3:a:adobe:commerce:2.3.7
-
cpe:2.3:a:adobe:commerce:2.4.0
-
cpe:2.3:a:adobe:commerce:2.4.1
-
cpe:2.3:a:adobe:commerce:2.4.2
-
cpe:2.3:a:adobe:commerce:2.4.3
-
cpe:2.3:a:adobe:commerce:2.4.4
-
cpe:2.3:a:adobe:commerce:2.4.5
-
cpe:2.3:a:adobe:commerce:2.4.6
-
cpe:2.3:a:adobe:commerce:2.4.7
-
cpe:2.3:a:adobe:commerce:2.4.8
-
cpe:2.3:a:adobe:commerce_b2b:1.2.0
-
cpe:2.3:a:adobe:commerce_b2b:1.3.0
-
cpe:2.3:a:adobe:commerce_b2b:1.3.1
-
cpe:2.3:a:adobe:commerce_b2b:1.3.2
-
cpe:2.3:a:adobe:commerce_b2b:1.3.3
-
cpe:2.3:a:adobe:commerce_b2b:1.3.4
-
cpe:2.3:a:adobe:commerce_b2b:1.4.2
-
cpe:2.3:a:adobe:commerce_b2b:1.5.2
-
cpe:2.3:a:adobe:magento:2.4.7
-
cpe:2.3:a:adobe:magento:2.4.8
-
cpe:2.3:a:adobe:magento:2.4.9