Adobe Commerce is affected by an unrestricted upload of a file with a dangerous type, which can result in arbitrary code execution in the context of the current user and potentially give an attacker elevated access to, or control over, the victim's account or session. CISA added it to the Known Exploited Vulnerabilities catalogue on 27 October. Adobe Commerce is the e-commerce platform behind a large share of online storefronts, so an upload path to code execution puts both payment data and storefront availability in scope, and the flaw is remotely reachable by an unauthenticated shopper.