CVE-2025-24411
CVSS 3.1 Score 8.1 of 10 (high)
Details
Summary
CVE-2025-24411 is a newly disclosed vulnerability affecting Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, and earlier releases. This issue involves an Improper Access Control flaw that enables a low-privileged attacker to bypass critical security features without user interaction. Consequentially, unauthorized access can be gained, potentially compromising sensitive information. Organizations running the affected Adobe Commerce versions are strongly advised to apply the necessary patches as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Commerce
Affected Vendors
- Adobe