CVE-2026-92909: Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
Can this be exploited remotely without an account or user action?
Yes. The supplied CVSS vector indicates network-based exploitation with no privileges required and no user interaction required.
What is the potential impact if exploitation succeeds?
An attacker could execute arbitrary code in the context of the current user. The CVSS vector also indicates high potential impact to confidentiality, integrity, and availability.
Which Adobe Commerce versions or deployments are affected?
The provided information does not identify affected versions, editions, or deployment configurations. Consult the referenced Adobe security advisory for product-specific scope and remediation details.