Set of Tue 29 Sep 2026

01 · Spice of the day 激辛

Adobe · Commerce and Magento

CVE-2026-71362

Adobe Commerce and Magento Incorrect Authorization Vulnerability

In CISA KEV since

24 Sep 2026

Ransomware use

Unknown

EPSS

0.875 · top 0.2%scored 27 Sep 2026

CVSS

9.1v3.1 · CNA

CISA remediation due 27 Sep 2026

• Score it in CVSS →
• EPSS 30-day trend
• Vendor advisory ↗

Picked: highest EPSS among KEV additions of the last 7 days, ransomware use as tie-break.

Today’s fetch came back empty, so this spice is still the one from 28 Sep 2026.