Adobe Commerce and Magento face active exploitation of vulnerability

A critical authorization vulnerability, identified as CVE-2026-71362, is being actively exploited in Adobe Commerce and Magento installations. According to CISA, the flaw allows attackers to gain elevated access to sensitive resources without requiring any user interaction.

Because Adobe Commerce and Magento are frequently used to manage online storefronts, they are often directly exposed to the internet and integrated with essential business processes, including customer data, payments, ERP systems, and shipping. The active exploitation of this vulnerability necessitates immediate investigation and securing of affected systems by administrators.