Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-34651

Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

Description

Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not require user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Commerce

Default version status: unaffected

  • 0 to ≤ 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17affected
  • 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18unaffected

Adobe Adobe Commerce B2B

Default version status: unaffected

  • 0 to ≤ 1.5.3-beta1, 1.5.2-p4, 1.4.2-p9, 1.3.4-p16, 1.3.3-p17affected
  • 1.5.3, 1.5.2-p5, 1.4.2-p10, 1.3.4-p17, 1.3.3-p18unaffected

Adobe Magento Open Source

Default version status: unaffected

  • 0 to ≤ 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14affected
  • 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15unaffected

References