{"vulnerability": "CVE-2026-71362", "sightings": [{"uuid": "6142da0b-db2f-495f-aaca-1b820cefbf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mszkimzvig2m", "content": "Same story different day as threat actors immediately jump on CVE-2026-71362, a critical 9.1 authorization flaw in Adobe Commerce, Commerce B2B, and Magento Open Source. Anyone operating these e-commerce stores gets the joy of unauthenticated strangers casually switching customer...\n\nRead full story", "creation_timestamp": "2026-08-14T06:41:45.747922Z"}, {"uuid": "8c10fa82-4741-4ecd-95e7-053185e5d159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://www.ncsc.nl/alerts/meerdere-kwetsbaarheden-in-adobe-commerce-update-onmiddellijk", "content": "", "creation_timestamp": "2026-08-18T16:15:03.639028Z"}, {"uuid": "191563aa-b0f4-4cb7-b0cd-dd184fdc8112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mt2bowtkvk2i", "content": "The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. www.securityweek.com/adobe-commer...", "creation_timestamp": "2026-08-14T13:36:53.875916Z"}, {"uuid": "91ce6362-0646-4c8e-b8e2-7bc22cd15e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117094128432953386", "content": "The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches. https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/", "creation_timestamp": "2026-08-14T13:36:46.814998Z"}, {"uuid": "14ab632a-ee99-4734-ad96-2d0af3605cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/pphm_HackerNews/2623", "content": "\ud83d\udd34 Adobe Commerce Bug Targeted Immediately After Disclosure\n\nHackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports.\n\nTracked as CVE-2026-71362 (CVSS score of 9.1), the security defect is described as an incorrect authorization issue that allows unauthenticated attackers to elevate their privileges.\n\nAdobe resolved the flaw on August 2026 Patch Tuesday, saying it had no evidence of in-the-wild exploitation, but warning that threat actors have targeted Commerce before.", "creation_timestamp": "2026-08-21T23:00:05.857216Z"}, {"uuid": "12d64008-71ba-4656-92b1-d7dfb78acef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mt2vzhs7e222", "content": "Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure\n\nHackers began targeting a critical Adobe Commerce flaw that could let unauthenticated attackers hijack customer accounts and access private data. Hackers began targeting CVE-2026-71362 (CVSS score of\u2026\n#hackernews #news", "creation_timestamp": "2026-08-14T19:40:41.802179Z"}, {"uuid": "ed0dc854-8025-4da3-99bd-4013d739dc40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3msvzaztvzi2i", "content": "Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts.", "creation_timestamp": "2026-08-12T20:55:17.943692Z"}, {"uuid": "b1bcfe58-83ff-4969-8472-b5c83f4b96b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msvzp7zxuf2s", "content": "\u30cf\u30c3\u30ab\u30fc\u304cAdobe Commerce\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u9867\u5ba2\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u308a\n\nAdobe\u306ee\u30b3\u30de\u30fc\u30b9\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cCommerce\u300d\u304a\u3088\u3073\u300cMagento\u300d\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-71362)\u3092\u60aa\u7528\u3057\u3088\u3046\u3068\u3059\u308b\u8a66\u307f\u304c\u691c\u51fa\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u9867\u5ba2\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u4e57\u3063\u53d6\u308a\u306b\u3064\u306a\u304c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u6b20\u9665\u306f\u8a8d\u53ef\u306e\u4e0d\u5099\u306b\u5206\u985e\u3055\u308c\u308b\u8106\u5f31\u6027\u3067\u3001\u8a8d\u8a3c\u306a\u3057\u306b\u300c\u6a5f\u5bc6\u6027\u306e\u9ad8\u3044\u30ea\u30bd\u30fc\u30b9\u3078...", "creation_timestamp": "2026-08-12T21:03:14.249236Z"}, {"uuid": "2a0b666e-a54d-4714-9ac5-21d0ddd4d6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msw4lixe4c2n", "content": "Adobe Commerce/Magento\u306b\u3001\u9867\u5ba2\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306b\u3064\u306a\u304c\u308b\u8106\u5f31\u6027(CVE-2026-71362)\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-08-12T21:54:51.150537Z"}, {"uuid": "1cccd75d-4f55-44b6-b0a0-cb0eb14c6129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msw4r6ijr72x", "content": "\ud83e\udd16 CVE-2026-71362: critical Adobe Commerce & Magento vulnerability under active exploitation. Attackers can hijack customer accounts on affected e-commerce stores.\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/", "creation_timestamp": "2026-08-12T21:58:00.932824Z"}, {"uuid": "de109cef-3082-4c05-b767-9d40bc391982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msw7fvqntg2y", "content": "Adobe Commerce and Magento are facing CVE-2026-71362, a critical auth flaw that can hijack customer sessions and expose account data. Sansec says its Shield WAF is already blocking exploit attempts. #AdobeCommerce #Magento #CVE2026-71362", "creation_timestamp": "2026-08-12T22:45:24.659839Z"}, {"uuid": "7bd22314-046d-46d8-ab39-90891e44a4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71362", "type": "seen", "source": "https://bsky.app/profile/mentedehackers.bsky.social/post/3mswe2gfwio2g", "content": "Adobe Commerce: fallo cr\u00edtico (CVE-2026-71362) permite secuestro de cuentas\n\nSansec detecta intentos contra CVE-2026-71362 en Adobe Commerce: permite cambiar\u2026\n\nhttps://mentehackers.com/adobe-commerce-cve-2026-71362-secuestro-cuentas-81531859\n#Ciberseguridad #Tecnologia #MenteHackers", "creation_timestamp": "2026-08-13T00:08:28.976541Z"}, {"uuid": "023a33af-6a68-4356-be62-4801d1721703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mtc3kqsld522", "content": "~Checkpoint~\nMultiple vendors patch actively exploited critical flaws, while Lazarus and China-linked APTs target defense and government sectors.\n-\nIOCs: CVE-2026-68820, CVE-2026-65400, CVE-2026-71362\n-\n#Ransomware #ThreatIntel #ZeroDay", "creation_timestamp": "2026-08-17T16:08:28.632555Z"}, {"uuid": "cf7a779c-94e7-4aac-be2e-26d83dc5aa16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mswnsalbbc2k", "content": "CVE-2026-71362 is trending. Hype score 4, currently #9 on cvemon.\n\nAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-71362", "creation_timestamp": "2026-08-13T03:02:50.271183Z"}, {"uuid": "2a3c5bc3-7f86-4686-a548-f28a713b962f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71362", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mswvdbkjun2f", "content": "Critical Adobe Commerce Flaw Under Active Exploit \u2014 Patch Now to Stop Account Hijacking\n\nhttps://blindthoughts.com/adobe-commerce-cve-2026-71362-active-exploitation\n\n#adobecommerce #magento #cve #activeexploitation #ecommercesecurity", "creation_timestamp": "2026-08-13T05:17:37.959008Z"}, {"uuid": "b7842b98-9900-4f07-9612-5f2cc617c69b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71362", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mswvinyc4q2i", "content": "\ud83d\udcf0 Peretas Eksploitasi Celah Kritis Adobe Commerce untuk Mengambil Alih Akun Pelanggan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/13/kerentanan-adobe-commerce-cve-2026-71362/\n\n#admin-hijack #adobe #adobeCommerce #akun #cross-siteScripting #cve #cvss #cybersecurity #e-commerc", "creation_timestamp": "2026-08-13T05:20:38.634075Z"}, {"uuid": "afb01496-1c9b-4ab6-b95e-aa8fd6bec33d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mswzhpeudn2m", "content": "\ud83e\ude79 Vuln\u00e9rabilit\u00e9s : Microsoft Defender \u00ab ShieldBreak \u00bb (zero-day, \u00e9l\u00e9vation SYSTEM) ; faille critique Adobe Commerce/Magento CVE-2026-71362 exploit\u00e9e pour d\u00e9tourner des comptes.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/", "creation_timestamp": "2026-08-13T06:31:41.520191Z"}, {"uuid": "cb5b56e7-d471-43a4-b770-5e8ed70a7ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "Telegram/mVcXaW5auzQ4JBLke65wzdbjFpDA7J1AVnLjzgWkNSxpfuo", "content": "", "creation_timestamp": "2026-08-17T18:00:06.659360Z"}, {"uuid": "9a594cfc-4297-453b-afe7-282b1fde33c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "Telegram/D80P1DRrFcCL_H0Dm5DuuSFaC5uBsrowsXW4XMlgLlUXnqc", "content": "", "creation_timestamp": "2026-08-17T18:00:06.799484Z"}, {"uuid": "2cabaf2a-44f4-4093-8136-4722890e6a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "published-proof-of-concept", "source": "Telegram/D80P1DRrFcCL_H0Dm5DuuSFaC5uBsrowsXW4XMlgLlUXnqc", "content": "", "creation_timestamp": "2026-08-18T00:00:09.180911Z"}, {"uuid": "54cff43d-d889-45c8-ae23-2a9dc290154c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "published-proof-of-concept", "source": "Telegram/mVcXaW5auzQ4JBLke65wzdbjFpDA7J1AVnLjzgWkNSxpfuo", "content": "", "creation_timestamp": "2026-08-18T00:00:09.559695Z"}, {"uuid": "8e94a124-4ac2-471f-ae0b-55053eb10baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msxiwwytyh2c", "content": "Adobe Commerce Exploit Attempts for CVE-2026-71362: The Conflict Between Vendor Advisory and Security Vendor Detection", "creation_timestamp": "2026-08-13T11:08:39.344191Z"}, {"uuid": "ef8c1ae2-cd43-44a7-80db-f6ff6b91d590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://www.acn.gov.it/portale/w/adobe-aggiornamenti-di-sicurezza-21", "content": "", "creation_timestamp": "2026-08-19T04:45:03.592158Z"}, {"uuid": "a6cc658f-c018-4d29-b6c3-34d1f0e53274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3msxs3567uk2a", "content": "Exploits for CVE-2026-71362 in Adobe Commerce and Magento are now active, with attackers using the flaw to hijack customer accounts.", "creation_timestamp": "2026-08-13T13:52:04.118481Z"}, {"uuid": "4d98c4dc-f47e-4160-b580-bf1315dc9a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-71362.yaml", "content": "", "creation_timestamp": "2026-08-18T06:00:05.179543Z"}, {"uuid": "2180ac1d-071e-45b4-988d-112d5b20d6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msxttlda2b23", "content": "Adobe Commerce\u306e\u30d0\u30b0\u3001\u516c\u958b\u76f4\u5f8c\u306b\u653b\u6483\u5bfe\u8c61\u306b\n\nWeb\u30b9\u30c8\u30a2\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4f01\u696d\u306eSansec\u306b\u3088\u308b\u3068\u3001Adobe Commerce\u3067\u65b0\u305f\u306b\u767a\u898b\u3055\u308c\u305f\u7dca\u6025\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u304c\u3001\u516c\u958b\u76f4\u5f8c\u304b\u3089\u30cf\u30c3\u30ab\u30fc\u306e\u6a19\u7684\u306b\u3055\u308c\u3066\u3044\u305f\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 CVE-2026-71362(CVSS\u30b9\u30b3\u30a29.1)\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u4e0d\u9069\u5207\u306a\u8a8d\u53ef\u306e\u554f\u984c\u3067\u3042\u308a\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483", "creation_timestamp": "2026-08-13T14:23:37.091583Z"}, {"uuid": "a6b6fb73-96f2-49e3-b877-045228245b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3msxttpxcag2n", "content": "CVE-2026-71362 enables unauthenticated privilege escalation in Adobe Commerce, letting attackers hijack customer sessions and access private data; apply August 2026 patches immediately.\n", "creation_timestamp": "2026-08-13T14:23:42.898158Z"}, {"uuid": "fcdb5ab5-9863-4c30-8cc8-ade49c26cace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/information_security_channel/55745", "content": "Adobe Commerce Bug Targeted Immediately After Disclosure\nhttps://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/\n\nThe first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.\nThe post Adobe Commerce Bug Targeted Immediately After Disclosure (https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-13T16:00:03.810876Z"}, {"uuid": "7d858df5-baff-43c8-8909-8c85826b4a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/esfxuansvnu3o", "content": "CVE-2026-71362 - Adobe Commerce | Incorrect Authorization (CWE-863)\nCVE ID : CVE-2026-71362\n \n Published : Aug. 11, 2026, 5:52 p.m. | 8\u00a0minutes ago\n \n Description : Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation...", "creation_timestamp": "2026-08-11T18:31:24.666539Z"}, {"uuid": "09774c45-4a8d-4474-9a85-d799f31c583e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msy6blcjsw2n", "content": "Adobe Commerce CVE-2026-71362 was exploited soon after disclosure. The critical 9.1 flaw can let unauthenticated attackers hijack customer sessions and access private account data. #AdobeCommerce #Magento #CVE202671362", "creation_timestamp": "2026-08-13T17:30:24.296441Z"}, {"uuid": "6470fe57-ef1b-481d-9d7f-bae4d2ee6c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstgbarqin2n", "content": "CVE-2026-71362 - adobe commerce\nAdobe Commerce is affected by a vulnerability that allows attackers to gain elevated access to sensitive resources without needing user interaction. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#adobecommerce #adobe #CVE #infosec", "creation_timestamp": "2026-08-11T20:10:04.502179Z"}, {"uuid": "dd80bbd6-0ebc-433e-ae67-04d812c1dbff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/c4oixljp6flma", "content": "Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure", "creation_timestamp": "2026-08-13T18:27:07.121454Z"}, {"uuid": "d90884e4-2c25-41cc-adf6-743a29b10f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msybi5gpjw2h", "content": "Critical Adobe Commerce Flaw CVE-2026-71362 Is Under Active Attack: Hackers Can Hijack Customer Accounts Without Logging In +\u00a0Video\n\nA Dangerous Warning for Every Magento Store Owner A critical vulnerability in Adobe Commerce and Magento Open Source has moved from disclosure to exploitation with\u2026", "creation_timestamp": "2026-08-13T18:27:47.311390Z"}, {"uuid": "67f04b13-3613-40d9-ad13-9d7725ed3305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msybvc4vl32i", "content": "Adobe Commerce CVE-2026-71362 Exploited Almost Immediately, Turning a Critical 91 Flaw Into an Urgent Security Warning +\u00a0Video\n\nA Critical Vulnerability Moves From Disclosure to Exploitation Some cybersecurity vulnerabilities remain theoretical for months. Others become dangerous the moment the\u2026", "creation_timestamp": "2026-08-13T18:35:07.530652Z"}, {"uuid": "469df761-0fd8-4daf-ba0b-1c40b13a4ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3msyfcnnsmm2q", "content": "Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure\n\n", "creation_timestamp": "2026-08-13T19:36:16.972686Z"}, {"uuid": "22078430-cb28-4f00-94c7-80474cb2d9d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/ctinow/255089", "content": "Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure\nhttps://ift.tt/8gQPLKW", "creation_timestamp": "2026-08-13T20:00:03.446430Z"}, {"uuid": "f0a29a82-ad6b-4204-aaae-fc91cc36e012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "Telegram/STZ-dxnjvBRaUEluzZoUa_ZRVjWB2Yf0sSx5h9-kiLJuZsLK", "content": "", "creation_timestamp": "2026-08-13T20:00:03.502752Z"}, {"uuid": "946181e9-efb4-4f5b-a2ec-c7d62e666b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/BleepingComputer/25313", "content": "\u200aHackers exploit critical Adobe Commerce flaw to hijack customer accounts\n\nAttempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/", "creation_timestamp": "2026-08-13T23:00:03.198279Z"}, {"uuid": "8c84ba3f-c90d-401d-9ec7-2a4517643053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/experiencedigest.bsky.social/post/3mstqu465p22t", "content": "CVE-2026-71362 (CRITICAL) CVSS 9.1: https://experiencedigest.org/2026/08/11/cve-critical-cvss.html", "creation_timestamp": "2026-08-11T23:19:34.519532Z"}, {"uuid": "28e127ea-28ad-4454-a2fc-4911fab10612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/ctinow/255089", "content": "Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure\nhttps://ift.tt/8gQPLKW", "creation_timestamp": "2026-08-14T00:00:07.814202Z"}, {"uuid": "5b56f0f8-61a6-405e-9be4-aab0640a4db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3msyvpqehrk22", "content": "Hackers exploit critical Adobe Commerce flaw to hijack customer accounts\n\nAttempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]\n#hackernews #news", "creation_timestamp": "2026-08-14T00:29:55.708540Z"}, {"uuid": "37fb7ee4-1d91-411c-9183-03ba1d9e1dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:10.085657Z"}, {"uuid": "3bf83906-3c2d-419a-aafd-f37c95782d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mu4anugu6y26", "content": "Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.\n\n#AdobeCommerce #Magento #CVE202671362 #AccountTakeover #ecommerce #InfoSec", "creation_timestamp": "2026-08-28T01:48:55.358150Z"}, {"uuid": "4513f220-2200-401a-b7a3-20823e7b69ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98189", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-71362-magento-lab\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 14:22:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOne-command Docker lab reproducing CVE-2026-71362 (Adobe Commerce / Magento Open Source customer-session identity-switch account takeover, APSB26-92, CVSS 9.1) with a PoC and an A/B/A official-patch negative control. For authorized security research and education.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:09.614271Z"}, {"uuid": "6c82ecd1-7a7e-42d4-b9ed-9f2c07334581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mv6twpryjf2j", "content": "~Cybergcca~\nSix advisories address vulnerabilities; CVE-2026-71362 is reportedly exploited in the wild.\n-\nIOCs: CVE-2026-71362, CVE-2026-67401, CVE-2026-65638\n-\n#CVE202671362 #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-09-10T20:04:24.084129Z"}, {"uuid": "9e8a20a4-a28b-4e2b-bc9f-c273730806ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/adobe-security-advisory-av26-808", "content": "", "creation_timestamp": "2026-09-10T20:15:05.766680Z"}, {"uuid": "cba49fe0-04c3-4b9a-a219-e58e2594aeaa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6b7bd2a2-fbd3-4488-9df3-e705ed74c6fd", "content": "", "creation_timestamp": "2026-09-11T07:00:39.717491Z"}, {"uuid": "e8a14297-f864-4914-8737-9ede108601a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/VulnerabilityNews/43938", "content": "Hackers exploit critical Adobe Commerce flaw to hijack customer accounts\n\nAttempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/", "creation_timestamp": "2026-09-18T12:00:07.267892Z"}, {"uuid": "29933f3d-4eb8-4d70-8b18-b4eee14f12d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/VulnerabilityNews/43969", "content": "Adobe Commerce Bug Targeted Immediately After Disclosure\n\nThe first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.\nThe post Adobe Commerce Bug Targeted Immediately After Disclosure appeared first on SecurityWeek.\nhttps://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/", "creation_timestamp": "2026-09-18T12:00:07.430059Z"}, {"uuid": "bba235c6-8c23-4aec-b8f7-e37282e22aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43938", "content": "Hackers exploit critical Adobe Commerce flaw to hijack customer accounts\n\nAttempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-adobe-commerce-flaw-to-hijack-customer-accounts/", "creation_timestamp": "2026-09-19T00:00:27.254904Z"}, {"uuid": "f9770370-35a7-4600-855d-f8b4a0c7cb42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/VulnerabilityNews/43969", "content": "Adobe Commerce Bug Targeted Immediately After Disclosure\n\nThe first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.\nThe post Adobe Commerce Bug Targeted Immediately After Disclosure appeared first on SecurityWeek.\nhttps://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/", "creation_timestamp": "2026-09-19T00:00:26.997721Z"}, {"uuid": "fd56d02a-f7c1-4d0d-8fd7-05eac4b6a7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mwbyr2qm4u2g", "content": "\ud83d\uded1 CVE-2026-71362\nAdobe Commerce and Magento\nCVSS 9.1 / EPSS 2% / KEV: No\nTL;DR: Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul\u2026\nhttps://cvesentinel.com/report/CVE-2026-71362?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-24T19:33:53.758264Z"}, {"uuid": "e39e8675-d0da-4210-b1a3-21cf2a412950", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1b7aa744-6dbf-4249-81cd-5764a61aab23", "content": "", "creation_timestamp": "2026-09-24T20:00:02.450963Z"}, {"uuid": "24dd51dc-e4e3-46f1-aab8-a5f6be9fdbec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mwc6g2f3t32o", "content": "Breaking: CISA adds Adobe Commerce CVE-2026-71362\n\u2022 SoFi shifts card program to SoFiUSD\n\u2022 Bungie outlines Marathon roadmap to 2027\n\u2022 Witcher 3 remaster launches September 29\nCatch the verified two-minute rundown.", "creation_timestamp": "2026-09-24T21:15:07.264881Z"}, {"uuid": "e026032c-f9ad-4210-86e7-13b20a4d7987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://gist.github.com/ichintu/ab5cbbd3842997755fe279a7f768db9d", "content": "This daily threat intelligence digest highlights critical, actively exploited vulnerabilities and systemic patching gaps across enterprise, mobile, AI, and web platforms:\n\n\u2022 **Actively Exploited & High-Impact Flaws:** Adobe\u2019s AV26-808 advisory (CVE-2026-71362 added to CISA KEV) impacts multiple products; WordPress patched a critical RCE (CVE-2026-87902) exploited within 24 hours; OnePlus devices allow unprivileged apps to gain root (CVE-2025-10184); Brocade SANnav leaks IPsec pre-shared keys in container logs (CVE-2026-14443, CVSS 8.4).\n\n\u2022 **AI & Emerging Threats:** Orca Security\u2019s 2026 report reveals 81% of AI-using organizations host vulnerable packages, 50% with public exploits, and 99.9% unpatched, as defenses focus on prompt injection over basic hygiene. The Lunex info stealer now leverages Bring Your Own Vulnerable Driver (BYOVD) techniques.\n\n\u2022 **Legacy & Credential Risks:** PHP HTTP redirect credential leak (CVE-2026-91766) underscores persistent data exposure from older curl handling flaws.\n\n\u2022 **Key Takeaway:** Exploit-to-patch windows have effectively collapsed, and unmanaged/inventory-blind deployments are creating critical blind spots. Immediate patching, automated remediation workflows, and strict asset tracking are essential to mitigate active threats.", "creation_timestamp": "2026-09-25T00:00:39.000000Z"}, {"uuid": "4682e16f-62a6-4478-87ea-2b1f9c00c61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwcyrsdmlq2e", "content": "CISA added CVE-2026-5430, a JWT auth bypass in WSO2 API Manager exploited since Sept 13 per watchTowr, and CVE-2026-71362, an Adobe Commerce/Magento auth flaw exploited since August per Sansec, to its KEV catalog today.", "creation_timestamp": "2026-09-25T05:06:58.783306Z"}, {"uuid": "e866de98-2281-4549-b064-acfd3c1c104a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwd5gyjoec2v", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-71362: \u26a0\ufe0f CVE-2026-71362: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 2.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-71362-adobe-commerce-is-affected-by-an", "creation_timestamp": "2026-09-25T06:30:24.269832Z"}, {"uuid": "54ff7c83-18a9-4a84-934d-2bbece78e523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://t.me/bdufstecru/3481", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043d\u043b\u0430\u0439\u043d \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u043c\u0438 Magento Open Source, Adobe Commerce \u0438 Adobe Commerce B2B \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\nBDU:2026-11928\nCVE-2026-71362\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://helpx.adobe.com/security/products/lightroom/apsb26-92.html", "creation_timestamp": "2026-09-25T13:57:01.000000Z"}, {"uuid": "88adc67f-2aad-4443-bfc0-cd648a44cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-71362", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mwe5c3vhap2a", "content": "CISA KEV: CVE-2026-5430 (WSO2, CVSS 10.0) and CVE-2026-71362 (Adobe Commerce, CVSS 9.1) added 9/24. Federal\u2026 https://0daynews.com/articles/2026-09-25-wso2-adobe-commerce-cisa-kev-cve-2026-5430-cve-2026-71362/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3534", "creation_timestamp": "2026-09-25T16:00:21.336515Z"}, {"uuid": "e3d4f68d-f998-4f15-824b-4f594f909459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117332796561127193", "content": "CISA has updated the catalogue.\n-  CVE-2026-65660: Microsoft SharePoint Code Injection Vulnerability https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=&field_date_added_wrapper=all&sort_by=field_date_added&items_per_page=20\n-  CVE-2026-67279: Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-67279\nYesterday:\n- CVE-2026-71362: Adobe Commerce and Magento Incorrect Authorization Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-71362\n-  CVE-2026-5430: WSO2 Multiple Products Path Traversal Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-5430 #CISA #infosec #vulnerability #Microsoft #Adobe", "creation_timestamp": "2026-09-25T17:13:13.831078Z"}, {"uuid": "f4da692b-c1cd-4093-aeca-69d06c67dc1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mweeyxsbuf2v", "content": "\ud83e\udd16 CISA added two critical bugs to its KEV catalog: CVE-2026-5430, a WSO2 auth bypass, and CVE-2026-71362, an Adobe Commerce flaw \u2014 both actively exploited in the wild.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-sharepoint-wso2-adobe-commerce-flaws-exploited-in-attacks/", "creation_timestamp": "2026-09-25T18:18:23.675770Z"}, {"uuid": "5f9c7f39-8e31-49b6-af53-f8d553e33947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mweomxpex6at", "content": "CISA has added Adobe $ADBE Commerce flaw CVE-2026-71362 to its known-exploited catalog. Adobe rates it critical and lists fixes for affected versions. Store operators should check their installed version and apply the matching update.", "creation_timestamp": "2026-09-25T21:14:20.755084Z"}, {"uuid": "3c3fd73f-8653-4fb5-b397-3507e2810f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-71362", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3301", "content": "\ud83d\udd34 WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\n\nThe vulnerabilities are listed below -\n\nCVE-2026-5430 (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution.\n\nCVE-2026-71362 (CVSS score: 9.1) - An incorrect authorization vulnerability in Adobe Commerce and Magento that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction.", "creation_timestamp": "2026-09-25T11:30:44.000000Z"}]}