CVE-2026-21289General(adobe / commerce)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized view access of data. Exploitation of this issue does not require user interaction.

adobe CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://helpx.adobe.com/security/products/magento/apsb26-05.html

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

commerce
commerce_b2b
magento

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
General: 3 classified signals
Disclosure: 2 classified signals
Peaked 2d ago at 3 mentions (2026-03-11); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

adobe

Products

commercecommerce_b2bmagento

12 versions affected across 3 products

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

General

360.0%

Disclosure

240.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-11	3	Disclosure2General1
2026-03-12	1	General1
2026-03-21	1	General1

Full discourse5 posts

dbugs@ptdbugs212d
Disclosure
Adobe Commerce | Incorrect Authorization (CWE-863) CVE: CVE-2026-21289 PT-Identifier: PT-2026-24553 Vendor: Adobe Product: Adobe Commerce CVSS: 7.5 Credits: n/a Description: Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized view access of data. Exploitation of this issue does not require user interaction. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-21289 • https://helpx.adobe.com/security/products/magento/apsb26-05.html #dbugs_vuln
Post summary
Adobe Commerce has a newly disclosed Incorrect Authorization vulnerability (CVE-2026-21289) that permits unauthorized view access without user interaction, affecting multiple legacy versions.
00021100
556 followersView on X
IntegSec@integ_sec201d
General
CVE-2026-21289: Adobe Commerce B2B Authorization Bypass - What It Means for Your Business and How to Respond https://hubs.li/Q047PVNx0
Post summary
The headline refers to CVE‑2026‑21289, a purported authorization bypass in Adobe Commerce B2B, but the provided text offers no evidence of exploitation, a PoC, or a patch, merely pointing to a discussion about its business impact.
0000022
29 followersView on X
RedPacket Security@RedPacketSec211d
General
CVE Alert: CVE-2026-21289 - Adobe - Adobe Commerce - https://www.redpacketsecurity.com/cve-alert-cve-2026-21289-adobe-adobe-commerce/ #OSINT #ThreatIntel #CyberSecurity #cve-2026-21289 #adobe #adobe-commerce
Post summary
A CVE alert for CVE-2026-21289 targeting Adobe Commerce is shared with a link to a security advisory page, but no further details, PoC, or exploit information are provided.
0000062
3.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds211d
General
CVE-2026-21289 Incorrect Authorization Vulnerability in Adobe Commerce Versions Prior to 2.4.9-alpha3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21289
Post summary
The text merely identifies an incorrect authorization flaw in Adobe Commerce pre‑2.4.9-alpha3, linking to a vulnerability page without offering PoC, exploit, or patch details.
0000014
4.0K followersView on X
CVE@CVEnew212d
Disclosure
CVE-2026-21289 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Incorrect Authorization vulnerability that co… https://www.cve.org/CVERecord?id=CVE-2026-21289
Post summary
The message announces CVE-2026-21289 as an incorrect‑authorization flaw affecting several Adobe Commerce releases, but contains no PoC, exploit details, or mitigation information.
00000104
56.7K followersView on X

CPE platform detail183 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

183 of 183 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	adobe	commerce	-	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.9	-	-
App	adobe	commerce	2.4.9	-	-
App	adobe	commerce	2.4.9	-	-
App	adobe	commerce_b2b	-	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.3	-	-
App	adobe	commerce_b2b	1.5.3	-	-
App	adobe	commerce_b2b	1.5.3	-	-
App	adobe	magento	-	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.9	-	-

Explore more

Back to dashboard adobe CVEs commerce vulnerabilities

What researchers are saying

CVE-2026-21289

dbugs[verified]@ptdbugsDisclosure

Adobe Commerce has a newly disclosed Incorrect Authorization vulnerability (CVE-2026-21289) that permits unauthorized view access without user interaction, affecting multiple legacy versions.

IntegSec[verified]@integ_secGeneral

The headline refers to CVE‑2026‑21289, a purported authorization bypass in Adobe Commerce B2B, but the provided text offers no evidence of exploitation, a PoC, or a patch, merely pointing to a discussion about its business impact.

RedPacket Security@RedPacketSecGeneral

A CVE alert for CVE-2026-21289 targeting Adobe Commerce is shared with a link to a security advisory page, but no further details, PoC, or exploit information are provided.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The text merely identifies an incorrect authorization flaw in Adobe Commerce pre‑2.4.9-alpha3, linking to a vulnerability page without offering PoC, exploit, or patch details.

CVE@CVEnewDisclosure

The message announces CVE-2026-21289 as an incorrect‑authorization flaw affecting several Adobe Commerce releases, but contains no PoC, exploit details, or mitigation information.