CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2026-48000
Medium (6.1) in adobe. EPSS 0.5% chance of exploitation in the next 30 days.
Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-11-01)
- CWE
- CWE-601
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:commerce
- adobe:commerce_b2b
- adobe:i\/o_events
- adobe:magento