Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation, and security feature bypass.
Adobe is not aware of any exploits in the wild for any of the issues addressed in these updates.
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version.
| Product | Updated version | Platform | Priority rating | Installation instructions | | --- | --- | --- | --- | --- | | Adobe Commerce | 2.4.9-2026-jul 2.4.8-2026-jul 2.4.7-2026-jul 2.4.6-2026-jul 2.4.5-2026-jul 2.4.4-2026-jul | All | 2 | Release Notes | | Adobe Commerce B2B | 1.5.3-2026-jul 1.5.2-2026-jul 1.4.2-2026-jul 1.3.4-2026-jul 1.3.3-2026-jul | All | 2 | Release Notes | | Magento Open Source | 2.4.9-2026-jul 2.4.8-2026-jul 2.4.7-2026-jul 2.4.6-2026-jul | All | 2 | Release Notes | | Adobe Commerce Events | 1.21.0 | All | 2 | Upgrade Modules and Extensions |
Exploitability
AV:NAC:LPR:NUI:RScope
S:CImpact
C:HI:HA:L9.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L