VIR Vulnerability Intelligence Relay

Package impact

php Packagist / magento/project-community-edition

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Flags OS Vendor Published Description
CVE-2025-54236 critical 9.1 10.0 9mo ago Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.