CVE-2026-75650: Adobe Commerce, инжекция

Описание

Оригинално описание

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.

Засегнати продукти

• Adobe Adobe Commerce: до 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug; Hotfix for CVE-2026-7565
• Adobe Adobe Commerce B2B: до 1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug; Hotfix for CVE-2026-7565
• Adobe Magento Open Source: до 2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug; Hotfix for CVE-2026-7565

Вид слабост

• CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine

История

Други уязвимости в Adobe Adobe Commerce

• 8.7CVE-2026-95631
• 10.0CVE-2026-103849
• 7.2CVE-2026-92910
• 9.3CVE-2026-91013
• 9.1CVE-2026-92464

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-75650
• https://nvd.nist.gov/vuln/detail/CVE-2026-75650
• https://helpx.adobe.com/security/products/magento/apsb26-146.html
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-75650