CVE-2026-48000

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.

• CWE-601

• https://helpx.adobe.com/security/products/magento/apsb26-73.htmlVendor Advisory

Published

Jul 14, 2026

Last Modified

Aug 7, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-47995Adobe Commerce is affected by a stored Cross-Site Scripting …8.1
• CVE-2026-47996Adobe Commerce is affected by an Incorrect Authorization vul…6.8
• CVE-2026-47997Adobe Commerce is affected by an Incorrect Authorization vul…5.9
• CVE-2026-47998Adobe Commerce is affected by an Incorrect Authorization vul…5.9
• CVE-2026-47999Adobe Commerce is affected by a stored Cross-Site Scripting …4.8
• CVE-2026-4800Impact: The fix for CVE-2021-23337 (https://github.com/advi…9.8
• CVE-2026-48001Adobe Commerce is affected by an Information Exposure vulner…3.7
• CVE-2026-48006Netty is a network application framework for development of …7.5
• CVE-2026-48007Element Call is a native Matrix video conferencing applicati…8.6
• CVE-2026-48008Shopware is an open commerce platform. Prior to 6.6.10.18 an…6.5
• CVE-2026-48009Shopware is an open commerce platform. Prior to 6.6.10.18 an…6.8
• CVE-2026-4801The Page Builder Gutenberg Blocks – CoBlocks plugin for Word…6.4