CVE-2026-21360
Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restricted path. Exploitation of this issue does not require user interaction.
Vendor
Product
CWE
Yayın Tarihi
2026-03-11 03:15:55
Güncelleme
2026-03-11 18:08:57
Source Identifier
psirt@adobe.com
KEV Date Added
-