CVE-2025-24419

Summary

CVE-2025-24419 is a newly disclosed vulnerability that impacts Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, and older. This Incorrect Authorization issue allows a low-privileged attacker to bypass security features and execute actions without proper authorization. Notably, exploitation does not necessitate user interaction, increasing the potential threat to affected systems. Attackers can leverage this vulnerability to gain unauthorized access to sensitive data or functionality, posing a significant risk to organizations using the susceptible Adobe Commerce editions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.