Security update available for Adobe Commerce | APSB26-146

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

PublisherAdobe

Article IDAPSB26-146

Verified snapshot26 Sept 2026, 20:28 UTC

Linked CVEs6

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-77108Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-76202Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-76201Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-76200Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-77109Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

Source and provenance

Original title: Security update available for Adobe Commerce | APSB26-146. Captured 26 Sept 2026, 20:28 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗