VulnSocial

CVE-2026-47992Patch(adobe / commerce)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch adobe commerce systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Adobe Commerce is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could exploit this vulnerability to execute malicious SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction.

adobe CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • commerce
  • commerce_b2b
  • i\/o_events
  • magento

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-14); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
adobe
Products
commercecommerce_b2bi\/o_eventsmagento

11 versions affected across 4 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-16: 1Patch / Workaround · 2026-07-14: 1Technical Details · 2026-07-14: 107-1407-16
Signal classification2 categories
Patch
150.0%
General
150.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-07-141
Patch1
2026-07-161
General1
Full discourse2 posts
  • にゃん☆たく/takumi.a@taku888infinity
    Patch

    今日のパッチチューズデー（MS一旦割愛） ◆Ivanti（クリティカルなし） CVE-2026-14903　Xtractionのパストラバーサルで任意ファイル読取 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?l… ◆Fortinet（クリティカルなし） CVE-2025-53379　FortiAuthenticator GUIの境界外読取り CVE-2026-59835　FortiSandboxのVNC無認証アクセス https://www.fortiguard.com/psirt?filter=1&version=&severity=5&severity=4&severity=3&severity=2 ◆SAP CVE-2026-44747　NetWeaver ABAPのメモリ破損で任意コード実行恐れ CVE-2026-27690　SAP ApprouterのHTTPリクエストスマグリング CVE-2026-44761　Commerce Cloudのサンプル認証情報が残存 CVE-2026-40128　NetWeaver Javaのディレクトリトラバーサル https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html ◆Adobe（今日多すぎ） Adobe ColdFusion（APSB26-82） CVE-2026-48318：パストラバーサルによる任意コード実行  CVE-2026-48322：コードインジェクションによる任意コード実行 CVE-2026-48284：入力検証不備による任意コード実行 CVE-2026-48321：認可不備による権限昇格 CVE-2026-48325：認証不備による任意コード実行  CVE-2026-48319：パストラバーサルによる任意コード実行  CVE-2026-48324：SQLインジェクションによる任意コード実行  CVE-2026-48327：認可不備による任意コード実行 CVE-2026-48320：反射型XSSによる権限昇格  CVE-2026-48328：入力検証不備による保護機能回避  CVE-2026-48332：SSRFによる保護機能回避  CVE-2026-48338：パストラバーサルによる任意ファイル読取 Adobe Commerce（APSB26-73） CVE-2026-48356：危険ファイルアップロードによる権限昇格 CVE-2026-48358：出力処理不備による任意コード実行 CVE-2026-47994：格納型XSSによる権限昇格 CVE-2026-47988：認可不備による保護機能回避 CVE-2026-47984：認可不備による保護機能回避 CVE-2026-47995：B2B機能の格納型XSSによる権限昇格 CVE-2026-47996：認可不備による保護機能回避 CVE-2026-47992：入力検証不備による権限昇格 Adobe Experience Manager（APSB26-74） CVE-2026-48259：SSRFによる任意コード実行 CVE-2026-48359：XXEによる任意コード実行 CVE-2026-48252：認証不備による保護機能回避 CVE-2026-48310：パストラバーサルによる任意読取 https://helpx.adobe.com/security.html

    Post summary

    The post announces multiple newly disclosed CVEs across vendors, links to advisory pages that provide patches, and details the technical nature of each flaw, but does not provide PoC code, exploit tools, or evidence of active exploitation.

    000421.6K
    11.8K followersView on X
  • NotCVE@notCVE
    General

    🎯 Most likely to be exploited next (EPSS): • CVE-2026-48356 — EPSS 28.3% · CVSS 9.6 • CVE-2026-50522 — EPSS 19.7% · CVSS 9.8 • CVE-2026-47992 — EPSS 19.6% · CVSS 7.2 📄 Full weekly tables → https://github.com/notcve/reports/blob/main/weekly/2026-07-16.md

    Post summary

    Provides a list of CVEs ranked by EPSS and CVSS scores with a link to a full weekly report; no exploitable code, patches, or verification of real‑world attacks are included.

    0000067
    60 followersView on X
CPE platform detail171 entries

171 of 171 entries

PartVendorProductVersionTarget SWTarget HW
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.4--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.5--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.6--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.7--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.8--
Appadobecommerce2.4.9--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.3--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.3.4--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.4.2--
Appadobecommerce_b2b1.5.2--
Appadobecommerce_b2b1.5.2--
Appadobecommerce_b2b1.5.2--
Appadobecommerce_b2b1.5.2--
Appadobecommerce_b2b1.5.2--
Appadobecommerce_b2b1.5.2--
Appadobecommerce_b2b1.5.3--
Appadobei\/o_events-commerce-
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.6--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.7--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.8--
Appadobemagento2.4.9--

Explore more

Back to dashboardadobe CVEscommerce vulnerabilities