CVE-2025-54236

Produto

Adobe / Commerce and Magento

Vulnerabilidade

Adobe Commerce and Magento Improper Input Validation Vulnerability

Adicionado ao KEV

24 de out. de 2025

Corrigir até

14 de nov. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54236