PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Oct 23, 2025

Adobe Commerce (Magento) - Remote Code Execution

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
3.8k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2022-24086
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Magento Commerceby Adobe
unspecified
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
Adobe Experience Manager 6.5.23.0 - SSRF
→high
Adobe Experience Manager Forms - Insecure Deserialization
→critical
Progress ADC LoadMaster - Command Injection
→high
Joomla com_jobprofile SQL Injection Scanner
→critical
CVE-2022-40619 Scanner
→critical
Flowise < 3.1.2 - node-custom-function Unauthorized RCE
→critical
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
→medium
WP Live Chat Support <= 8.0.27 Stored Cross-Site Scripting
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Adobe Commerce (Magento) - Remote Code Execution CVE-2022-24086 Scanner | S4E