CVE-2026-21291Disclosure(adobe / commerce)

LOWCVSS 4.8 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field.

adobe CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://helpx.adobe.com/security/products/magento/apsb26-05.html

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

commerce
commerce_b2b
magento

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

adobe

Products

commercecommerce_b2bmagento

12 versions affected across 3 products

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds212d
Disclosure
CVE-2026-21291 Stored Cross-Site Scripting Vulnerability in Adobe Commerce Versions Prior to 2.4.9-alpha3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21291
Post summary
The text announces a stored XSS vulnerability (CVE‑2026‑21291) affecting Adobe Commerce versions prior to 2.4.9‑alpha3, without indicating any PoC, exploit, or patch information.
0000012
4.0K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash212d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-21291 - Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) Intel Report: https://ift.tt/bveoRkz
Post summary
The post announces CVE-2026-21291 affecting Adobe Commerce as a stored XSS vulnerability (CWE‑79), providing technical details but no PoC, exploit, active exploitation, or mitigation information.
0000018
343 followersView on X
CVE@CVEnew212d
Disclosure
CVE-2026-21291 Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerabilit… https://www.cve.org/CVERecord?id=CVE-2026-21291
Post summary
The post lists CVE‑2026‑21291, noting it as a stored XSS vulnerability affecting certain Adobe Commerce versions and links to the official CVE record.
0000082
56.7K followersView on X

CPE platform detail183 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

183 of 183 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	adobe	commerce	-	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.4	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.5	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.6	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.7	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.8	-	-
App	adobe	commerce	2.4.9	-	-
App	adobe	commerce	2.4.9	-	-
App	adobe	commerce	2.4.9	-	-
App	adobe	commerce_b2b	-	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.3	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.4	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.3.5	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.4.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.2	-	-
App	adobe	commerce_b2b	1.5.3	-	-
App	adobe	commerce_b2b	1.5.3	-	-
App	adobe	commerce_b2b	1.5.3	-	-
App	adobe	magento	-	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.5	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.6	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.7	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.8	-	-
App	adobe	magento	2.4.9	-	-

Explore more

Back to dashboard adobe CVEs commerce vulnerabilities