EUVD-2026-74034
GHSA-m742-263v-3vr3
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:L
Matches vendor vector: admin-level auth (PR:H) required over network (AV:N); scope change (S:C) reflects traversal beyond application boundary; C:N consistent with write-only traversal primitive per description.
Primary rating from Vendor (adobe).
CVSS VectorVendor: adobe
Lifecycle Timeline
2DescriptionCVE.org
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.
AnalysisAI
Path traversal (CWE-22) in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source enables an authenticated high-privilege attacker to escape intended directory restrictions, achieving high integrity impact on files outside the application boundary - with scope change indicating the affected filesystem resources extend beyond the application itself. Affected version lines span Adobe Commerce through 2.4.9-2026-aug, Commerce B2B through 1.5.3-2026-aug, and Magento Open Source through 2.4.9-2026-aug, all addressed in Adobe's August 2026 security release APSB26-138. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a high-privilege administrator account within Adobe Commerce or Magento Open Source (PR:H per CVSS vector). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.6 rating captures a meaningful but bounded threat: network reachability (AV:N) and low complexity (AC:L) lower the bar for exploitation once the attacker has credentials, while the PR:H prerequisite substantially narrows the attacker pool to those who have already compromised or possess a high-privilege admin account. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the August 2026 security patches for Adobe Commerce, Adobe Commerce B2B, and Magento Open Source as documented in Adobe Security Bulletin APSB26-138 (https://helpx.adobe.com/security/products/magento/apsb26-138.html). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all instances of Adobe Commerce, Commerce B2B, or Magento Open Source and identify those at version 2.4.9-2026-aug or earlier (B2B 1.5.3-2026-aug or earlier). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Magento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks and execute arbitrary
SQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid class in Magento Communit
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML E
Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which ca
Privilege escalation in Adobe Commerce and Magento Open Source (including Adobe Commerce B2B) lets a remote attacker gai
An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Rated high severity (CVSS 8.1), th
Magento LTS is the official OpenMage LTS codebase. Rated high severity (CVSS 7.5), this vulnerability is remotely exploi
PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento
The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterpri
Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. Rated medium severity (CVSS 6.1), this
Password reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via a GET request and not
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today