Adobe Commerce and Magento: dangerous file upload (CVE-2026-48356)
Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability. It could result in arbitrary code execution in the context of the current user. CISA has added it to the KEV catalog as exploited in real attacks.
Checked in Shield: no
Who is affected
Adobe Commerce and Magento are affected. The source does not specify which versions are vulnerable; this is not disclosed yet.
How to check
Confirm whether you run Adobe Commerce or Magento and consult the Adobe bulletin. Look for signs of compromise: unexpected files in upload directories, suspicious changes, unusual account or session activity.
How to fix
CISA advises applying mitigations per vendor instructions, following BOD 26-04 and its Forensics Triage Requirements. If mitigations are unavailable, CISA advises discontinuing use of the product. Fixed versions are not stated in the source.
What Shield checks not checked
Checked in Shield: no. This is usually not visible from outside, or the check has not been added yet; we collect such cases and add checks in batches.
Good to know
Affected and fixed versions are not disclosed yet. Source: CISA KEV entry and NVD (CVE-2026-48356).
