CVE-2026-34649

HIGH EPSS 96.2%
Published May 12, 20261mo ago · Modified Jun 17, 20261w ago
7.5 CVSS 3.1
High
Find Similar
Published May 12, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

CVSS Details

Base Score
7.5
Exploitability
3.9
Impact
3.6
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
96.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-400 Uncontrolled Resource Consumption Resource Mgmt

Affected Products 161

VendorProductVersionRange
adobecommerce* <2.4.4
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.4any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.5any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.6any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.7any
adobecommerce2.4.8any
adobecommerce2.4.8any
adobecommerce2.4.8any
adobecommerce2.4.8any
adobecommerce2.4.8any
adobecommerce2.4.8any
adobecommerce2.4.8any
adobecommerce2.4.9any
adobecommerce_b2b* <1.3.3
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.3any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.3.4any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.4.2any
adobecommerce_b2b1.5.2any
adobecommerce_b2b1.5.2any
adobecommerce_b2b1.5.2any
adobecommerce_b2b1.5.2any
adobecommerce_b2b1.5.2any
adobecommerce_b2b1.5.3any
adobemagento* <2.4.6
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.6any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.7any
adobemagento2.4.8any
adobemagento2.4.8any
adobemagento2.4.8any
adobemagento2.4.8any
adobemagento2.4.8any
adobemagento2.4.8any
adobemagento2.4.8any
adobemagento2.4.9any

References 1

  • helpx.adobe.com https://helpx.adobe.com/security/products/magento/apsb26-49.html
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.