Product:
Adobe Commerce
Summary
Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, with limited impact to integrity. Exploitation of this issue does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-21310 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted input to the affected Adobe Commerce versions. Since the vulnerability allows for improper input validation, the attacker can bypass security features without needing any user interaction, making it easier to exploit remotely.
Affected Products
- Adobe Commerce 2.4.9-alpha3
- Adobe Commerce 2.4.8-p3
- Adobe Commerce 2.4.7-p8
- Adobe Commerce 2.4.6-p13
- Adobe Commerce 2.4.5-p15
- Adobe Commerce 2.4.4-p16
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Adobe Commerce that addresses the improper input validation issue. Regularly applying security patches and updates is essential to protect against potential exploits.