| Description: | | Adobe Commerce is a world-leading digital commerce solution from the U.S. company Adobe, designed for merchants and brands. Adobe Commerce, Adobe Commerce B2B, and Magento Open Source are affected by a code injection vulnerability. The vulnerability results from improper neutralization of special elements by the template engine, which may lead to arbitrary code execution in the context of the current user. The following versions are affected: Adobe Commerce 2.4.9-2026-aug and earlier, 2.4.8-2026-aug and earlier, 2.4.7-2026-aug and earlier, 2.4.6-2026-aug and earlier, 2.4.5-2026-aug and earlier, and 2.4.4-2026-aug and earlier; Adobe Commerce B2B 1.5.3-2026-aug and earlier, 1.5.2-2026-aug and earlier, 1.4.2-2026-aug and earlier, 1.3.4-2026-aug and earlier, and 1.3.3-2026-aug and earlier; and Magento Open Source 2.4.9-2026-aug and earlier, 2.4.8-2026-aug and earlier, 2.4.7-2026-aug and earlier, and 2.4.6-2026-aug and earlier. |