{"id":"CVE-2026-48356","url":"https://compromised.live/t/CVE-2026-48356","kind":"exploited_vuln","tier":1,"severity":"high","title":"Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","summary":"Attackers can upload dangerous file types to the store and run their own code, potentially taking over accounts or sessions. This flaw is being actively exploited. Adobe Commerce and Magento. Apply the vendor's update now and check for signs of compromise, such as unexpected uploaded files or unfamiliar admin activity.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-27","due_date":"2026-11-10","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.","aliases":["CVE-2026-48356"],"sources":[{"name":"kev","id":"CVE-2026-48356","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48356"}]}