{"id":"CVE-2026-92910","title":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass","summary":"Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N","cwe":["CWE-863"],"published":"2026-10-13","updated":"2026-10-13","sourceUpdated":"2026-10-13T19:27:28.620","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92910","references":[{"url":"https://www.adobe.com/trust/security/products/commerce/apsb26-153.html","label":"psirt@adobe.com"}],"tags":["nvd"],"ingestedAt":"2026-10-13T19:43:29.243Z","slug":"CVE-2026-92910","body":"## Overview\n\nAdobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}