Security update available for Adobe Commerce | APSB26-153

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

PublisherAdobe

Article IDAPSB26-153

Verified snapshot15 Oct 2026, 10:41 UTC

Linked CVEs12

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-92909Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-92464Adobe Commerce | Improper Input Validation (CWE-20)
CVE-2026-95631Adobe Commerce | Improper Input Validation (CWE-20)
CVE-2026-103849Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
CVE-2026-92908Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-91013Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-92911Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-92910Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-95630Adobe Commerce | Improper Input Validation (CWE-20)
CVE-2026-92922Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-100133Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Source and provenance

Original title: Security update available for Adobe Commerce | APSB26-153. Captured 15 Oct 2026, 10:41 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗