VulnerabilityBleeping Computer
9.1 — CRITICAL
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Hackers are exploiting a critical Adobe Commerce flaw (CVE-2026-71362) to hijack customer accounts, potentially gaining elevated access to sensitive resources without authentication. The vulnerability allows attackers to switch a customer session to another account, giving them access to the victim's account and private data.
⚙️Technical Details
Affected Systems
Adobe CommerceMagento
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Website administrators of Adobe Commerce and Magento e-commerce platforms
🛡️Recommended Actions
1Apply the August 2026 security update for currently supported Commerce, Commerce B2B, and Magento release lines as soon as possible.
2Ensure running the latest -p release available for their supported release branch before applying isolated patch files.
3Enable web application firewalls (WAFs) to block exploitation attempts.
📦Affected Products
Adobe CommerceMagento
🔐NVD Verified DataVERIFIED
CVE-2026-71362 ↗CVSS 9.1 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NWeaknesses
CWE-863
CVE-2026-48414 ↗CVSS 7.7 — HIGH
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:NWeaknesses
CWE-79
CVE-2026-48413 ↗CVSS 8.7 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:NWeaknesses
CWE-79
CVE-2026-48415 ↗CVSS 7.6 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:LWeaknesses
CWE-863
CVE-2026-48416 ↗CVSS 7.5 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWeaknesses
CWE-863
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.