Is CVE-2025-54236 in the CISA Known Exploited Vulnerabilities catalog?

Yes — CVE-2025-54236 is listed in CISA KEV, remediation due 2025-11-14.

Which frameworks does CVE-2025-54236 affect?

CVE-2025-54236 affects Magento.

CISA Known Exploited Vulnerability

CVE-2025-54236: Magento 2 vulnerability (actively exploited)

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability that could allow an attacker to take over customer accounts through the Commerce REST API.

⚠ Actively exploited (CISA KEV) Magento 2025

CISA catalog entry

Product

Commerce and Magento

Vendor

Adobe

Added to KEV

2025-10-24

Remediation due

2025-11-14

What WebPulse reported · 1 analysis

Sansec: 953 online stores infected by malware that hides from scanners

A clean scan shows how a store looks to a scanner. It does not show what shoppers see.

October 27, 2026

View CVE-2025-54236 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-75650 CVE-2026-71362 CVE-2026-48356 CVE-2024-34102 CVE-2022-24086 CVE-2025-3248 CVE-2025-8671 CVE-2025-8088