CVE-2021-36029

7.2 highEPSS 2.5%

High (7.2) in adobe. EPSS 2.5% chance of exploitation in the next 30 days.

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-285
Published: 2021-09-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adobe:adobe_commerce
adobe:magento_open_source

References

https://helpx.adobe.com/security/products/magento/apsb21-64.html
https://helpx.adobe.com/security/products/magento/apsb21-64.html

Check your stack JSON