CVE-2026-47984: Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-47984?
CVE-2026-47984 has a critical severity rating of 9.1.
What type of vulnerability is CVE-2026-47984?
CVE-2026-47984 is classified as an Incorrect Authorization vulnerability, also known as a security feature bypass.
How can CVE-2026-47984 be exploited?
An attacker can exploit CVE-2026-47984 to bypass security measures, gaining unauthorized read and write access.
Does CVE-2026-47984 require user interaction for exploitation?
No, exploitation of CVE-2026-47984 does not require any user interaction.
What versions of Adobe Commerce are affected by CVE-2026-47984?
CVE-2026-47984 affects Adobe Commerce, Adobe Commerce B2B, and Adobe Magento.