CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-92909 — Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul...

·Source: NIST NVD

Updated:

Executive Summary

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction.

Analysis

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. CVSS Score: 9.8. Published: 2026-10-13T19:21:43.613.

Indicators of Compromise (1)

CVE (1)
CVE-2026-92909
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

CRITICALZero Day

October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days

Microsoft released a record-shattering 1,407 CVEs to be plugged today on October Patch Tuesday, breaking the 2020 record of 1,261. The list was so long that its release was several hours later than the usual 1 p.m. Eastern drop time, somewhat frustrating admins. The bugs include three zero-day vulnerabilities, one of which has been exploited. The zero day being exploited, and that should be dealt

CVE-2026-96951CVE-2026-21510
CSO Online
CRITICALVulnerabilityNEW

Critical UEFI Flaw Exposes Systems to Pre-Boot Attacks

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/critical-uefi-flaw-exposes-systems-to-pre-boot-attacks-image_small-3-a-33252.jpg" align=right hspace=4><b>Attackers Can Exploit ICMP Error Handling Before Operating System Protections Load</b><br>A critical buffer overflow in TianoCore's EDK II UEFI firmware, tracked as CVE-2026-97631, could let unauthenticated attackers execute c

CVE-2026-97631
Bank Info Security
MEDIUMVulnerabilityNEW

Binance probes potential $5.8 billion crypto-theft hack

Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest cryptocurrency hack in history. [...]

BleepingComputer