Known vulnerabilities in Adobe Commerce B2B 1.5.3-alpha1

Vendor: Adobe
Version: 1.5.3-alpha1
Software CPE: cpe:2.3:a:adobe:adobe_commerce_b2b:*:*:*:*:*:*:*:*
Total vulnerabilities: 75
Public exploits: 2
Known exploited (KEV): 3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Adobe Commerce B2B version 1.5.3-alpha1 Adobe Commerce B2B 1.5.3-alpha1 is affected by 75 vulnerabilities: 2 critical, 13 high, 21 medium, 39 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148857 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-77110
CWE-22 Low
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148858 - Incorrect Authorization
CVE-2026-77108
CWE-863 Medium
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148853 - Incorrect Authorization
CVE-2026-77111
CWE-863 Low
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148854 - Incorrect Authorization
CVE-2026-77109
CWE-863 High
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148855 - Incorrect Authorization
CVE-2026-77774
CWE-863 High
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148856 - Incorrect Authorization
CVE-2026-76202
CWE-863 High
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76200
CWE-79 Medium
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU148852 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76201
CWE-79 Medium
No
No
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 09.09.2026 SB20260907142
#VU147353 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-75650
CWE-1336 Critical
No
Exploited
1.3.3-2026-sep, 1.3.4-2026-sep, 1.4.2-2026-sep, 1.5.2-2026-sep, 1.5.3-2026-sep 07.09.2026 SB20260907142
#VU141504 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48413
CWE-79 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141505 - Incorrect Authorization
CVE-2026-48415
CWE-863 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141506 - Incorrect Authorization
CVE-2026-48416
CWE-863 Medium
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141507 - Incorrect Authorization
CVE-2026-48411
CWE-863 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141508 - Incorrect Authorization
CVE-2026-48412
CWE-863 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141502 - Incorrect Authorization
CVE-2026-71362
CWE-863 High
Public exploit available
Exploited
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU141503 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-48414
CWE-79 Low
No
No
1.3.3-2026-aug, 1.3.4-2026-aug, 1.4.2-2026-aug, 1.5.2-2026-aug, 1.5.3-2026-aug 11.08.2026 SB2026081157
#VU137585 - Unrestricted Upload of File with Dangerous Type
CVE-2026-48356
CWE-434 High
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137589 - Incorrect Authorization
CVE-2026-47984
CWE-863 High
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137596 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2026-48000
CWE-601 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509
#VU137597 - Exposure of sensitive information to an unauthorized actor
CVE-2026-48001
CWE-200 Low
No
No
1.3.3-2026-jul, 1.3.4-2026-jul, 1.4.2-2026-jul, 1.5.2-2026-jul, 1.5.3-2026-jul 15.07.2026 SB2026071509


Showing elements 1 - 20 out of 75