CVE-2025-54236 : Over 250 Magento Stores Hit Overnight as Hackers Exploit New Adobe Commerce Flaw
The vulnerability in question is CVE-2025-54236 (CVSS score: 9.1), a critical improper input validation flaw that could be abused to take over customer accounts in Adobe Commerce through the Commerce REST API.
2025. 10. 23.