Known vulnerabilities in Magento Open Source 2.4.6-2026-aug

Vendor: Adobe
Version: 2.4.6-2026-aug
Software CPE: cpe:2.3:a:adobe:magento:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 1

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Magento Open Source version 2.4.6-2026-aug Magento Open Source 2.4.6-2026-aug is affected by 7 vulnerabilities: 1 critical, 2 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148857 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-77110
CWE-22 Low
No
No
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 09.09.2026 SB20260907142
#VU148853 - Incorrect Authorization
CVE-2026-77111
CWE-863 Low
No
No
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 09.09.2026 SB20260907142
#VU148855 - Incorrect Authorization
CVE-2026-77774
CWE-863 High
No
No
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 09.09.2026 SB20260907142
#VU148856 - Incorrect Authorization
CVE-2026-76202
CWE-863 High
No
No
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 09.09.2026 SB20260907142
#VU148851 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76200
CWE-79 Medium
No
No
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 09.09.2026 SB20260907142
#VU148852 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-76201
CWE-79 Medium
No
No
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 09.09.2026 SB20260907142
#VU147353 - Improper Neutralization of Special Elements Used in a Template Engine
CVE-2026-75650
CWE-1336 Critical
No
Exploited
2.4.7-2026-sep, 2.4.8-2026-sep, 2.4.9-2026-sep 07.09.2026 SB20260907142