CVE-2026-48415

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction.

• CWE-863

• https://helpx.adobe.com/security/products/magento/apsb26-92.html

Published

Aug 11, 2026

Last Modified

Aug 11, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4841A weakness has been identified in code-projects Online Food …7.3
• CVE-2026-48410Lightroom Classic is affected by an out-of-bounds write vuln…7.8
• CVE-2026-48411Adobe Commerce is affected by an Incorrect Authorization vul…6.5
• CVE-2026-48412Adobe Commerce is affected by an Incorrect Authorization vul…2.7
• CVE-2026-48413Adobe Commerce is affected by a stored Cross-Site Scripting …8.7
• CVE-2026-48414Adobe Commerce is affected by a stored Cross-Site Scripting …7.7
• CVE-2026-48416Adobe Commerce is affected by an Incorrect Authorization vul…7.5
• CVE-2026-4842A security vulnerability has been detected in itsourcecode O…7.3
• CVE-2026-4843The GSheet For Woo Importer plugin for WordPress is vulnerab…4.3
• CVE-2026-48434CAI Content Credentials is affected by an Uncontrolled Resou…6.2
• CVE-2026-48435CAI Content Credentials is affected by an Integer Underflow …6.2
• CVE-2026-48436CAI Content Credentials is affected by an Improper Input Val…6.5