Warning: Actively Exploited Critical Vulnerability in Adobe Commerce, Patch Immediately!

Adobe published a security bulletin on 11 August 2026 reporting seven network-exploitable vulnerabilities in Adobe Commerce, Adobe Commerce B2B and Magento Open Source (five rated critical). The most severe, CVE-2026-71362 (CVSS 9.1), is an unauthenticated incorrect authorization flaw enabling privilege escalation and session swapping to expose customer data; active exploitation has been reported. The Centre for Cybersecurity Belgium and Adobe recommend immediate patching and increased monitoring, and note that patching does not remediate prior compromises.