Set of Sun 27 Sep 2026

01 · Spice of the day 激辛

Adobe · Commerce and Magento

CVE-2026-71362

Adobe Commerce and Magento Incorrect Authorization Vulnerability

In CISA KEV since

24 Sep 2026

Ransomware use

Unknown

EPSS

0.875 · top 0.2%scored 26 Sep 2026

CVSS

9.1v3.1 · CNA

CISA remediation due 27 Sep 2026

• Score it in CVSS →
• EPSS 30-day trend
• Vendor advisory ↗

Picked: highest EPSS among KEV additions of the last 7 days, ransomware use as tie-break.