Product:
Adobe Commerce
Summary
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Dependency on Vulnerable Third-Party Component vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-34652 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted requests to the affected Adobe Commerce application. This can lead to a denial-of-service condition, causing the application to crash without any need for user interaction.
Affected Products
- Adobe Commerce 2.4.9-beta1
- Adobe Commerce 2.4.8-p4
- Adobe Commerce 2.4.7-p9
- Adobe Commerce 2.4.6-p14
- Adobe Commerce 2.4.5-p16
- Adobe Commerce 2.4.4-p17
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of Adobe Commerce that addresses the dependency on the vulnerable third-party component. Regularly monitoring and applying security updates can help prevent exploitation.