{"id":"CVE-2026-75650","title":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user","summary":"Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnera…","severity":"critical","cvss":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-1336"],"vendor":"adobe","product":"commerce","affected":["commerce < 2.4.4","commerce = 2.4.4","commerce = 2.4.5","commerce = 2.4.6","commerce = 2.4.7","commerce = 2.4.8","commerce = 2.4.9","commerce_b2b < 1.3.3","commerce_b2b = 1.3.3","commerce_b2b = 1.3.4","commerce_b2b = 1.4.2","commerce_b2b = 1.5.2","commerce_b2b = 1.5.3","magento < 2.4.6","magento = 2.4.6","magento = 2.4.7","magento = 2.4.8","magento = 2.4.9"],"patched":["commerce 2.4.4","commerce_b2b 1.3.3","magento 2.4.6"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T05:18:07.237","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-75650","references":[{"url":"https://helpx.adobe.com/security/products/magento/apsb26-146.html","label":"psirt@adobe.com"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-75650","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","in-the-wild","exploit-available","kev"],"exploited":true,"exploitAvailable":true,"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-08T18:44:04.878935Z"},"epss":0.02148,"epssPercentile":0.81057,"kev":true,"kevDateAdded":"2026-09-08","kevDueDate":"2026-09-11","kevRansomware":false,"exploits":{"github":5,"githubRepos":["https://github.com/fortbridge/stylesmuggler","https://github.com/dinosn/cve-2026-75650-magento-validation-lab","https://github.com/disrex-group/stylesmuggler-adobe-patches"],"checkedAt":"2026-09-21T15:30:37.405Z"},"zeroDay":true,"ingestedAt":"2026-09-08T15:33:26.980Z","slug":"CVE-2026-75650","body":"## Overview\n\nAdobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.\n\n## Affected\n\n- `commerce < 2.4.4`\n- `commerce = 2.4.4`\n- `commerce = 2.4.5`\n- `commerce = 2.4.6`\n- `commerce = 2.4.7`\n- `commerce = 2.4.8`\n- `commerce = 2.4.9`\n- `commerce_b2b < 1.3.3`\n- `commerce_b2b = 1.3.3`\n- `commerce_b2b = 1.3.4`\n- `commerce_b2b = 1.4.2`\n- `commerce_b2b = 1.5.2`\n- `commerce_b2b = 1.5.3`\n- `magento < 2.4.6`\n- `magento = 2.4.6`\n- `magento = 2.4.7`\n- `magento = 2.4.8`\n- `magento = 2.4.9`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `commerce 2.4.4`\n- `commerce_b2b 1.3.3`\n- `magento 2.4.6`","depth":"hadal","depthScore":80,"depthScoreParts":{"impact":55,"likelihood":0.4,"exploitation":25,"ransomware":0},"changes":[{"seq":201914,"id":"CVE-2026-75650","ts":1789399984038,"field":"zero_day","old":"false","new":"true"},{"seq":201913,"id":"CVE-2026-75650","ts":1789399984038,"field":"kev","old":"false","new":"true"},{"seq":200644,"id":"CVE-2026-75650","ts":1789397558673,"field":"zero_day","old":"true","new":"false"},{"seq":200643,"id":"CVE-2026-75650","ts":1789397558673,"field":"kev","old":"true","new":"false"},{"seq":199351,"id":"CVE-2026-75650","ts":1789395470462,"field":"zero_day","old":"false","new":"true"},{"seq":199350,"id":"CVE-2026-75650","ts":1789395470462,"field":"kev","old":"false","new":"true"},{"seq":198596,"id":"CVE-2026-75650","ts":1789392162436,"field":"zero_day","old":"true","new":"false"},{"seq":198595,"id":"CVE-2026-75650","ts":1789392162436,"field":"kev","old":"true","new":"false"},{"seq":198551,"id":"CVE-2026-75650","ts":1789392083369,"field":"zero_day","old":"false","new":"true"},{"seq":198550,"id":"CVE-2026-75650","ts":1789392083369,"field":"kev","old":"false","new":"true"},{"seq":196342,"id":"CVE-2026-75650","ts":1789383731107,"field":"zero_day","old":"true","new":"false"},{"seq":196341,"id":"CVE-2026-75650","ts":1789383731107,"field":"kev","old":"true","new":"false"},{"seq":195271,"id":"CVE-2026-75650","ts":1789380552420,"field":"zero_day","old":"false","new":"true"},{"seq":195270,"id":"CVE-2026-75650","ts":1789380552420,"field":"kev","old":"false","new":"true"},{"seq":194058,"id":"CVE-2026-75650","ts":1789378654616,"field":"zero_day","old":"true","new":"false"},{"seq":194057,"id":"CVE-2026-75650","ts":1789378654616,"field":"kev","old":"true","new":"false"},{"seq":192845,"id":"CVE-2026-75650","ts":1789376486525,"field":"zero_day","old":"false","new":"true"},{"seq":192844,"id":"CVE-2026-75650","ts":1789376486525,"field":"kev","old":"false","new":"true"},{"seq":191632,"id":"CVE-2026-75650","ts":1789373576690,"field":"zero_day","old":"true","new":"false"},{"seq":191631,"id":"CVE-2026-75650","ts":1789373576690,"field":"kev","old":"true","new":"false"},{"seq":190417,"id":"CVE-2026-75650","ts":1789369425901,"field":"zero_day","old":"false","new":"true"},{"seq":190416,"id":"CVE-2026-75650","ts":1789369425901,"field":"kev","old":"false","new":"true"},{"seq":189204,"id":"CVE-2026-75650","ts":1789368351380,"field":"zero_day","old":"true","new":"false"},{"seq":189203,"id":"CVE-2026-75650","ts":1789368351380,"field":"kev","old":"true","new":"false"},{"seq":187987,"id":"CVE-2026-75650","ts":1789365206508,"field":"zero_day","old":"false","new":"true"},{"seq":187986,"id":"CVE-2026-75650","ts":1789365206508,"field":"kev","old":"false","new":"true"},{"seq":186774,"id":"CVE-2026-75650","ts":1789363432949,"field":"zero_day","old":"true","new":"false"},{"seq":186773,"id":"CVE-2026-75650","ts":1789363432949,"field":"kev","old":"true","new":"false"},{"seq":185560,"id":"CVE-2026-75650","ts":1789361189928,"field":"zero_day","old":"false","new":"true"},{"seq":185559,"id":"CVE-2026-75650","ts":1789361189928,"field":"kev","old":"false","new":"true"},{"seq":184347,"id":"CVE-2026-75650","ts":1789358296327,"field":"zero_day","old":"true","new":"false"},{"seq":184346,"id":"CVE-2026-75650","ts":1789358296327,"field":"kev","old":"true","new":"false"},{"seq":182598,"id":"CVE-2026-75650","ts":1789354293605,"field":"zero_day","old":"false","new":"true"},{"seq":182597,"id":"CVE-2026-75650","ts":1789354293605,"field":"kev","old":"false","new":"true"},{"seq":181391,"id":"CVE-2026-75650","ts":1789353258158,"field":"zero_day","old":"true","new":"false"},{"seq":181390,"id":"CVE-2026-75650","ts":1789353258158,"field":"kev","old":"true","new":"false"},{"seq":180184,"id":"CVE-2026-75650","ts":1789350245567,"field":"zero_day","old":"false","new":"true"},{"seq":180183,"id":"CVE-2026-75650","ts":1789350245567,"field":"kev","old":"false","new":"true"},{"seq":178977,"id":"CVE-2026-75650","ts":1789348245037,"field":"zero_day","old":"true","new":"false"},{"seq":178976,"id":"CVE-2026-75650","ts":1789348245037,"field":"kev","old":"true","new":"false"},{"seq":177770,"id":"CVE-2026-75650","ts":1789346348477,"field":"zero_day","old":"false","new":"true"},{"seq":177769,"id":"CVE-2026-75650","ts":1789346348477,"field":"kev","old":"false","new":"true"},{"seq":176563,"id":"CVE-2026-75650","ts":1789343149153,"field":"zero_day","old":"true","new":"false"},{"seq":176562,"id":"CVE-2026-75650","ts":1789343149153,"field":"kev","old":"true","new":"false"},{"seq":174680,"id":"CVE-2026-75650","ts":1789334845104,"field":"zero_day","old":"false","new":"true"},{"seq":174679,"id":"CVE-2026-75650","ts":1789334845104,"field":"kev","old":"false","new":"true"},{"seq":173475,"id":"CVE-2026-75650","ts":1789333626830,"field":"zero_day","old":"true","new":"false"},{"seq":173474,"id":"CVE-2026-75650","ts":1789333626830,"field":"kev","old":"true","new":"false"},{"seq":172289,"id":"CVE-2026-75650","ts":1789331071889,"field":"zero_day","old":"false","new":"true"},{"seq":172288,"id":"CVE-2026-75650","ts":1789331071889,"field":"kev","old":"false","new":"true"}]}