CVE-2026-71362

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 13, 2026

Last Seen

September 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Authorization Flaw in Adobe Commerce and Magento Exposed72.8

On August 11, 2026, Adobe released a security update addressing CVE-2026-71362, a critical Incorrect Authorization vulnerability in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source. This flaw allows unauthenticated account takeover, enabling attackers to switch customer sessions without a...

Critical Adobe Commerce Flaw Allows Account Takeover72.6

A critical vulnerability (CVE-2026-71362) in Adobe Commerce and Magento platforms has been exploited, allowing unauthenticated attackers to hijack customer accounts. The flaw, rated 9.1 on the CVSS scale, enables attackers to switch customer sessions without needing existing accounts or user interac...