Adobe Commerce and Magento Incorrect Authorization Vulnerability

CVE-2026-71362 is an incorrect authorization vulnerability affecting Adobe Commerce and Magento platforms. The flaw allows attackers to gain elevated access to sensitive resources without requiring any user interaction, making it particularly dangerous. The vulnerability has been catalogued by CISA and is subject to BOD 26-04, which prioritizes security updates based on risk. Adobe has published an official security advisory (APSB26-92) with remediation guidance. The issue is also tracked in the NVD. CISA has provided forensic triage requirements as part of implementation guidance for the BOD 26-04 directive. The vulnerability is rated High severity. Organizations using Adobe Commerce or Magento are urged to apply security updates promptly to mitigate the risk of unauthorized privilege escalation.