← Back to browse · API

CVE-2022-24086

Severity
CRITICAL
CVSS
9.8
EPSS
0.9911
Risk score
59.69
CISA KEV
Yes
PoC
No
Published
2022-02-16
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2022-0975, GHSA-F8FV-F786-9933
Products
Adobe:Commerce and Magento Open Source, Adobe:Magento Commerce unspecified ≤2.3.7-p2, Adobe:Magento Commerce unspecified ≤2.4.3-p1, Adobe:Magento Commerce unspecified ≤None
Sources
cisa.gov CVE-2022-24086
euvd EUVD-2022-0975

Description

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

References