Adobe Commerce: open redirect

Medium6.1CVE-2026-48000 · Published Jul 14, 2026 · updated Aug 28, 2026

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.