CVE-2025-24427

Summary

CVE-2025-24427 is a newly disclosed vulnerability affecting Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, and earlier. This issue is classified as an Improper Access Control vulnerability, which allows a low-privileged attacker to bypass crucial security features without user interaction. The exploitation of this flaw does not necessitate any form of user engagement, making it a significant concern for affected organizations. The vulnerability can result in unauthorized access, posing a significant risk to sensitive data and systems. It is essential that users of the affected Adobe Commerce versions apply the necessary security patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.