CVE-2025-24421

Summary

CVE-2025-24421 is a newly disclosed vulnerability affecting Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, and earlier. This issue involves an Incorrect Authorization flaw, enabling a low-privileged attacker to bypass security features and perform unauthorized actions without user interaction. The vulnerability could potentially lead to significant security risks, as the attacker may gain access to functionalities not intended for their user level. Immediate updates or patches are recommended to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.