Observation · Exploited Vulnerabilities

CVE-2026-48356 — Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

The source recorded 1 CVE for this item, in Global. Everything below is what that source published, with the times this observatory received it — no part of it is inferred.

Reading

Value: 1 CVE
Source severity: none supplied by the source
Region: Global
Coordinates: not geolocated
Data quality: complete as published

Evidence and provenance

Source: CISA KEV
Source record ID: kev:CVE-2026-48356
Observed at: 2026-10-27 12:00 UTC
First ingested here: 2026-11-01 19:30 UTC
Last refreshed from source: 2026-11-01 21:00 UTC

Open the original record at the source ← Back to the Exploited Vulnerabilities signal

Additional fields the source published (4)

vendor: Adobe
product: Commerce and Magento
due_date: 2026-11-10
ransomware_use: Unknown