CVE-2025-24418

Summary

CVE-2025-24418 is a newly disclosed vulnerability that affects Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and earlier. This issue represents an Improper Authorization vulnerability, which enables privilege escalation. Low-privileged attackers can exploit it without user interaction and bypass security measures, ultimately gaining unauthorized access to the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.