p PatchFirst

PatchFirst · Latest vulnerabilities

magento/community-edition 2.4.9: known vulnerabilities

Known vulnerability affecting magento/community-edition 2.4.9: 1. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-54236

    Critical · CVSS 9.1EPSS 94.66%In KEVPublic exploitNo fix published

    Adobe Commerce | Improper Input Validation (CWE-20)

    Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.

    magento/community-editionPHP
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →