CVE-2026-48416: Adobe Commerce | Incorrect Authorization (CWE-863)

Published Aug 11, 2026

Updated

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.

Affected Software

126 affected components

Adobe Adobe Commerce

Adobe Commerce B2b=1.3.3-p1

Adobe Commerce B2b=1.3.3-p10

Adobe Commerce B2b=1.3.3-p2

Adobe Commerce B2b=1.3.3-p3

Adobe Commerce B2b=1.3.3-p4

Adobe Commerce B2b=1.3.3-p5

Adobe Commerce B2b=1.3.3-p6

Adobe Commerce B2b=1.3.3-p7

Adobe Commerce B2b=1.3.3-p8

Adobe Commerce B2b=1.3.3-p9

Adobe Commerce B2b=1.3.4-p1

Adobe Commerce B2b=1.3.4-p2

Adobe Commerce B2b=1.3.4-p3

Adobe Commerce B2b=1.3.4-p4

Adobe Commerce B2b=1.3.4-p5

Adobe Commerce B2b=1.3.4-p6

Adobe Commerce B2b=1.3.4-p7

Adobe Commerce B2b=1.3.4-p8

Adobe Commerce B2b=1.3.4-p9

Adobe Commerce B2b=1.3.5-p1

Adobe Commerce B2b=1.3.5-p2

Adobe Commerce B2b=1.3.5-p3

Adobe Commerce B2b=1.3.5-p4

Adobe Commerce B2b=1.3.5-p5

Adobe Commerce B2b=1.3.5-p6

Adobe Commerce B2b=1.3.5-p7

Adobe Commerce B2b=1.4.2-p1

Adobe Commerce B2b=1.4.2-p2

Adobe Commerce=2.4.4-p1

Adobe Commerce=2.4.4-p10

Adobe Commerce=2.4.4-p11

Adobe Commerce=2.4.4-p12

Adobe Commerce=2.4.4-p13

Adobe Commerce=2.4.4-p14

Adobe Commerce=2.4.4-p15

Adobe Commerce=2.4.4-p16

Adobe Commerce=2.4.4-p17

Adobe Commerce=2.4.4-p18

Adobe Commerce=2.4.4-p2

Adobe Commerce=2.4.4-p3

Adobe Commerce=2.4.4-p4

Adobe Commerce=2.4.4-p5

Adobe Commerce=2.4.4-p6

Adobe Commerce=2.4.4-p7

Adobe Commerce=2.4.4-p8

Adobe Commerce=2.4.4-p9

Adobe Commerce=2.4.5-p1

Adobe Commerce=2.4.5-p10

Adobe Commerce=2.4.5-p11

Adobe Commerce=2.4.5-p12

Adobe Commerce=2.4.5-p13

Adobe Commerce=2.4.5-p14

Adobe Commerce=2.4.5-p15

Adobe Commerce=2.4.5-p16

Adobe Commerce=2.4.5-p17

Adobe Commerce=2.4.5-p2

Adobe Commerce=2.4.5-p3

Adobe Commerce=2.4.5-p4

Adobe Commerce=2.4.5-p5

Adobe Commerce=2.4.5-p6

Adobe Commerce=2.4.5-p7

Adobe Commerce=2.4.5-p8

Adobe Commerce=2.4.5-p9

Adobe Commerce=2.4.6-p1

Adobe Commerce=2.4.6-p10

Adobe Commerce=2.4.6-p11

Adobe Commerce=2.4.6-p12

Adobe Commerce=2.4.6-p13

Adobe Commerce=2.4.6-p14

Adobe Commerce=2.4.6-p15

Adobe Commerce=2.4.6-p2

Adobe Commerce=2.4.6-p3

Adobe Commerce=2.4.6-p4

Adobe Commerce=2.4.6-p5

Adobe Commerce=2.4.6-p6

Adobe Commerce=2.4.6-p7

Adobe Commerce=2.4.6-p8

Adobe Commerce=2.4.6-p9

Adobe Commerce=2.4.7-p1

Adobe Commerce=2.4.7-p10

Adobe Commerce=2.4.7-p2

Adobe Commerce=2.4.7-p3

Adobe Commerce=2.4.7-p4

Adobe Commerce=2.4.7-p5

Adobe Commerce=2.4.7-p6

Adobe Commerce=2.4.7-p7

Adobe Commerce=2.4.7-p8

Adobe Commerce=2.4.7-p9

Adobe Commerce=2.4.8-p1

Adobe Commerce=2.4.8-p2

Adobe Commerce=2.4.8-p3

Adobe Commerce=2.4.8-p4

Adobe Commerce=2.4.8-p5

Adobe Commerce=2.4.9

Adobe Magento=2.4.6-p1

Adobe Magento=2.4.6-p10

Adobe Magento=2.4.6-p11

Adobe Magento=2.4.6-p12

Adobe Magento=2.4.6-p13

Adobe Magento=2.4.6-p14

Adobe Magento=2.4.6-p15

Adobe Magento=2.4.6-p2

Adobe Magento=2.4.6-p3

Adobe Magento=2.4.6-p4

Adobe Magento=2.4.6-p5

Adobe Magento=2.4.6-p6

Adobe Magento=2.4.6-p7

Adobe Magento=2.4.6-p8

Adobe Magento=2.4.6-p9

Adobe Magento=2.4.7-p1

Adobe Magento=2.4.7-p10

Adobe Magento=2.4.7-p2

Adobe Magento=2.4.7-p3

Adobe Magento=2.4.7-p4

Adobe Magento=2.4.7-p5

Adobe Magento=2.4.7-p6

Adobe Magento=2.4.7-p7

Adobe Magento=2.4.7-p8

Adobe Magento=2.4.7-p9

Adobe Magento=2.4.8-p1

Adobe Magento=2.4.8-p2

Adobe Magento=2.4.8-p3

Adobe Magento=2.4.8-p4

Adobe Magento=2.4.8-p5

Adobe Magento=2.4.9

Event History

Aug 11, 2026

CVE Published

via MITRE·05:52 PM

Data Sourced

via MITRE·05:52 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-48416?

The severity of CVE-2026-48416 is rated as high with a score of 7.5.

What type of vulnerability is CVE-2026-48416?

CVE-2026-48416 is classified as an Incorrect Authorization vulnerability that may allow security feature bypass.

What can an attacker achieve by exploiting CVE-2026-48416?

An attacker exploiting CVE-2026-48416 could gain unauthorized read access and bypass security measures.

Does exploitation of CVE-2026-48416 require user interaction?

No, exploitation of CVE-2026-48416 does not require user interaction.

Which software is affected by CVE-2026-48416?

CVE-2026-48416 affects Adobe Commerce.