About this page
Every CVE mentioned in the news ThreatFeed reads, with its severity, how likely it is to be exploited (EPSS), whether it is on CISA's Known Exploited Vulnerabilities list, and any public exploit code in Metasploit or ExploitDB. Use it to find the vulnerabilities being exploited or talked about now: search by CVE or keyword, and narrow by time window, severity or source. Each CVE has an AI action plan: patch now, mitigate or watch.
🚨 Exploitation Status
within the current filter · click a card to jump to it
📊 CVE Severity Distribution
last 30 days
🐞 Results
1 CVEs in the last 30 days
CVE-2026-48356
CRITICAL
CVSS: 9.3
EPSS: 30.6%
VulnCheck KEV
Weaponized
CWE-434
T1105
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Published: 2026-07-14
Mentioned in 1 article(s):