Known vulnerabilities in Adobe Commerce B2B 1.5.2-2026-jul

Vendor: Adobe
Version: 1.5.2-2026-jul
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce B2B version 1.5.2-2026-jul Adobe Commerce B2B 1.5.2-2026-jul is affected by 7 vulnerabilities: 1 high, 1 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141504 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48413
CWE-79 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141505 - Incorrect Authorization
CVE-2026-48415
CWE-863 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141506 - Incorrect Authorization
CVE-2026-48416
CWE-863 Medium
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141507 - Incorrect Authorization
CVE-2026-48411
CWE-863 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141508 - Incorrect Authorization
CVE-2026-48412
CWE-863 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141502 - Incorrect Authorization
CVE-2026-71362
CWE-863 High
No
Exploited
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141503 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48414
CWE-79 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157