CISA KEV: CVE-2026-48356 — Adobe Commerce and Magento actively exploited

Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability. Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Upda