Updated daily · official sources

Security Radar

Vulnerabilities (CVE) being actively exploited, according to the CISA KEV catalog, with CVSS severity and exploitation probability (EPSS).

34exploited in the last 30 days

13critical (CVSS ≥ 9)

0used in ransomware

1779in the KEV catalog

CVE-2026-48356 Critical · CVSS 9.3 added on 10/27/2026

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

Adobe · Commerce and Magento · CWE-434

Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session.

Want to know if your environment is exposed?

We assess versions, access and integrations of your ERP and infrastructure and prioritize the fixes.

Talk to a specialist

Sources: CISA Known Exploited Vulnerabilities Catalog, NIST National Vulnerability Database and FIRST EPSS. Informational content; always follow the vendor advisory and fix.

This product uses the NVD API but is not endorsed or certified by the NVD.