CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-48356 — Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type...

·Source: NIST NVD

Updated:

Executive Summary

Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interac

Analysis

Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed. CVSS Score: 9.6. Published: 2026-07-14T20:17:08.437.

Indicators of Compromise (1)

CVE (1)
CVE-2026-48356
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 14, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CISA Report on US Election Cybersecurity Draws Plaudits

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cisa-report-on-us-election-cybersecurity-draws-plaudits-image_small-10-a-32278.jpg" align=right hspace=4><b>Apolitical Analysis Suggests Better Patching Practices</b><br>Amid the partisan clamor surrounding U.S. President Donald Trump's false claims last week of widespread voter fraud in the 2020 presidential election, one little-

Bank Info Security
LOWVulnerability

Cisco Launches Low-Cost AI Models for Source Code Security

The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models. The post Cisco Launches Low-Cost AI Models for Source Code Security appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerability

Spain fines 23andMe nearly $3 million for cybersecurity failings enabling 2023 hack

The Agencia Española de Protección de Datos (AEPD) announced the fine on Friday, saying in its decision that more than 2,600 Spaniards were impacted by a breach affecting 6.9 million people worldwide.

The Record