PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Aug 18, 2026

Adobe Commerce/Magento - Customer Session Identity Switch

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
2.4k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2026-71362
9.1
CVSScritical
Exploitable remotely over the internet · no authentication required.

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
Adobe Commerceby Adobe
0
Adobe Commerce B2Bby Adobe
0
Magento Open Sourceby Adobe
0
Updated Sep 9, 2026View on NVD →
Similar Tools
medium
Adobe Experience Manager 6.5.23.0 - XML Injection
→high
Guralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)
→critical
Apache RocketMQ - Remote Command Execution
→medium
SMB - Default Logins
→medium
FortiOS - Insecure LDAP Configuration Detection
→medium
Widget4Call WordPress - Cross-Site Scripting
→medium
OWL Carousel Slider - Cross-Site Scripting
→medium
FortiOS - Insecure LDAP Configuration Detection
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Adobe Commerce/Magento - Customer Session Identity Switch CVE-2026-71362 Scanner | S4E