Is CVE-2026-71362 in the CISA Known Exploited Vulnerabilities catalog?

Yes — CVE-2026-71362 is listed in CISA KEV, remediation due 2026-09-27.

Which frameworks does CVE-2026-71362 affect?

CVE-2026-71362 affects Magento.

CISA Known Exploited Vulnerability

CVE-2026-71362 — Magento Actively Exploited CVE

Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user

⚠ Actively exploited (CISA KEV) Magento 2026

CISA catalog entry

Product

Commerce and Magento

Vendor

Adobe

Added to KEV

2026-09-24

Remediation due

2026-09-27

What WebPulse reported · 1 analysis

CISA adds WSO2 and Adobe Commerce flaws to exploited-vulnerability list

A forged-token bug and an unauthenticated authorization flaw are both listed as exploited, with federal deadlines from Sept. 27

September 27, 2026

View CVE-2026-71362 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-75650 CVE-2025-54236 CVE-2024-34102 CVE-2022-24086 CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548