CVE security advisories and vulnerability history for Magento Open Source by Adobe.
Last updated
Adobe Magento Open Source has 97 published CVE records since 2021, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Adobe Magento Open Source, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of Adobe Magento Open Source's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of Adobe Magento Open Source's CVEs is confirmed exploited in the wild.
Public exploits
1
One of Adobe Magento Open Source's CVEs has a known public exploit available.
Browse every Adobe Magento Open Source version named in a CVE, then pick one to see only the CVEs that affect it.
97 CVEs
Added to CISA KEV 2026-09-08
Showing 30 of 97
The CWE weakness categories most often found in Adobe Magento Open Source CVEs. Follow any weakness for its full explanation.
How many Adobe Magento Open Source CVEs were published each year.
Browse vulnerabilities for other products by Adobe.
Common questions about Adobe Magento Open Source vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new Adobe Magento Open Source vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
