Adobe Commerce — CVE-2026-47984 (Critical)
Critical vendor advisory
CVE-2026-47984
Summary
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user interaction.
Why it matters
This CVE carries a CRITICAL severity rating (CVSS 8.2) in Adobe Commerce. Patch or mitigate promptly. EPSS percentile: 41%.
Operator check
Review CVE-2026-47984 in your asset inventory. Apply patches per vendor guidance and verify Commerce is not exposed. CVSS score: 8.2. EPSS probability: 0.5%; percentile: 41%.
Sources
PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.