Adobe Commerce/Magento CVE-2025-54236 Critical Input Validation Vulnerability Advisory

Critical Vulnerability Information Announcement ID: APSB25-69 Release Date: September 9, 2025 Priority: 2 Vulnerability Overview Adobe has released security updates for Adobe Commerce and Magento Open Source, addressing a critical input validation vulnerability (CVE-2025-54236). Successful exploitation of this vulnerability could lead to bypassing security features. Affected Versions Remediation Update to patch package CVF-2025-S4236 for all affected versions. Installation instructions: Click here Vulnerability Details Vulnerability Category: Improper Input Validation Impact: Security Feature Bypass Severity: Critical Authentication Required for Exploitation: No Administrator Privileges Required for Exploitation: No CVSS Base Score: 9.1 CVSS Vector: CVSS:3.1/AV:N/AC:L Acknowledgments Thank you to the following researchers for reporting these issues and assisting Adobe in protecting customers: bbkls - CVE-2025-54236

Goal Reached Thanks to every supporter — we hit 100%!

Adobe Commerce/Magento CVE-2025-54236 Critical Input Validation Vulnerability Advisory