CVE-2025-54236

Producto

Adobe / Commerce and Magento

Vulnerabilidad

Adobe Commerce and Magento Improper Input Validation Vulnerability

Añadido a KEV

24 oct 2025

Remediar antes de

14 nov 2025

Uso conocido en ransomware

No

Descripción resumida

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54236